--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d262fa32-7b2b-4363-8c22-4644d07983de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836576,"nanos":814506522},"http":{"id":"d262fa32-7b2b-4363-8c22-4644d07983de","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d262fa32-7b2b-4363-8c22-4644d07983de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53324","PortSpecifier":{"PortValue":53324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53324","PortSpecifier":{"PortValue":53324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836576,"nanos":850965860},"http":{"id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/auth-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3aaa05c-3b5e-4205-93a9-f67f297b9e9e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36066","PortSpecifier":{"PortValue":36066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36066","PortSpecifier":{"PortValue":36066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836576,"nanos":882890006},"http":{"id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","method":"GET","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ioxd79yKjlzU1fKV_7HUTpTf2lwI8Xkydi92WJl90xqSc8hZUqcVucOoBWLu"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ioxd79yKjlzU1fKV_7HUTpTf2lwI8Xkydi92WJl90xqSc8hZUqcVucOoBWLu\"}"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"df5fde2b-a35e-43cb-9759-4ea265c6beac","keyName":"e2e-auth-iso-a-4c5c8b","subscription":"e2e-auth-iso-8fd991","tenant":"e2e-shared-a-459a5a","userId":"df5fde2b-a35e-43cb-9759-4ea265c6beac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8fd991"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e39e240-60c8-4649-84cc-b608e2dd5d75","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55434","PortSpecifier":{"PortValue":55434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55434","PortSpecifier":{"PortValue":55434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836591,"nanos":793189642},"http":{"id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdfe086b-f807-4fad-98e0-39b39b76cd18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"error","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"error","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"error","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:56:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:56:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58972","PortSpecifier":{"PortValue":58972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58972","PortSpecifier":{"PortValue":58972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836608,"nanos":894975239},"http":{"id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5b6fbf9-be4c-40dd-8ee4-66c1b417e6ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53538","PortSpecifier":{"PortValue":53538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53538","PortSpecifier":{"PortValue":53538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836608,"nanos":942857640},"http":{"id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/auth-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"438d5fca-d18e-4a9b-aea8-fd3773dafad8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58974","PortSpecifier":{"PortValue":58974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e93b6574-2557-4804-af2f-c9733a192e6e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58974","PortSpecifier":{"PortValue":58974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836608,"nanos":982767762},"http":{"id":"e93b6574-2557-4804-af2f-c9733a192e6e","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e93b6574-2557-4804-af2f-c9733a192e6e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53544","PortSpecifier":{"PortValue":53544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53544","PortSpecifier":{"PortValue":53544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836609,"nanos":20771197},"http":{"id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/auth-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:56:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97bdbab7-2c1e-46a2-92e3-ddb236934ce4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:56:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"debug","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"error","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39340","PortSpecifier":{"PortValue":39340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39340","PortSpecifier":{"PortValue":39340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836626,"nanos":62514512},"http":{"id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06de6865-203f-4ae8-8269-d0c07f7b7d38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37946","PortSpecifier":{"PortValue":37946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"375fda1a-73c2-4870-9830-23ddf685fd48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37946","PortSpecifier":{"PortValue":37946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836626,"nanos":94547904},"http":{"id":"375fda1a-73c2-4870-9830-23ddf685fd48","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/auth-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"375fda1a-73c2-4870-9830-23ddf685fd48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","method":"GET","path":"/maas-api/v1/api-keys/3d6faedb-66c5-426f-8083-53f631e242fa","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37962","PortSpecifier":{"PortValue":37962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836626,"nanos":130834750},"http":{"id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","method":"GET","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d6faedb-66c5-426f-8083-53f631e242fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d6faedb-66c5-426f-8083-53f631e242fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/auth-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a51bf27-9281-4122-998a-ef6bf59b49fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4022803-5989-4060-93d6-34fc895311f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39348","PortSpecifier":{"PortValue":39348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b4022803-5989-4060-93d6-34fc895311f0","method":"GET","path":"/maas-api/v1/api-keys/3d6faedb-66c5-426f-8083-53f631e242fa","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b4022803-5989-4060-93d6-34fc895311f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39348","PortSpecifier":{"PortValue":39348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836626,"nanos":162103237},"http":{"id":"b4022803-5989-4060-93d6-34fc895311f0","method":"GET","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d6faedb-66c5-426f-8083-53f631e242fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b4022803-5989-4060-93d6-34fc895311f0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b4022803-5989-4060-93d6-34fc895311f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d6faedb-66c5-426f-8083-53f631e242fa",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b4022803-5989-4060-93d6-34fc895311f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4022803-5989-4060-93d6-34fc895311f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b4022803-5989-4060-93d6-34fc895311f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"error","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:57:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"debug","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47976","PortSpecifier":{"PortValue":47976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47976","PortSpecifier":{"PortValue":47976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836641,"nanos":109801130},"http":{"id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69c763b1-10f2-4828-b1e1-ec8fd44cae03","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56382","PortSpecifier":{"PortValue":56382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98f2924c-d5e5-4a26-8746-17083f26111b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56382","PortSpecifier":{"PortValue":56382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836641,"nanos":142791773},"http":{"id":"98f2924c-d5e5-4a26-8746-17083f26111b","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/auth-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98f2924c-d5e5-4a26-8746-17083f26111b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47980","PortSpecifier":{"PortValue":47980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47980","PortSpecifier":{"PortValue":47980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836641,"nanos":178794360},"http":{"id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PKpzivPVXtk4jPCE_vOO6rZSSjvqCX5irmzS1GaZvMSCZnENkJqWBGZrgjUX"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PKpzivPVXtk4jPCE_vOO6rZSSjvqCX5irmzS1GaZvMSCZnENkJqWBGZrgjUX\"}"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bd993709-6c73-4de1-876f-b842a7cdf802","keyName":"e2e-auth-iso-a-30903d","subscription":"e2e-auth-iso-988b08","tenant":"e2e-shared-a-459a5a","userId":"bd993709-6c73-4de1-876f-b842a7cdf802","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/auth-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-988b08"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:57:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc5247f0-577b-4e62-b606-8eb89ed147f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76d747d0d009939c97b75b87e4cfa3b6146fa64690a5a0051d449d66cb293267"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f84d563c89a89472f451f0d3125a5d84040b68ab7e828a059808bfbae6b7e7da"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64018cc4d7df2e1cef2ba3ddce579896c616fa3807b841efe25081f6c4f3752b"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9bd7914bb2395a0823ecb7d18937ba24f784589228ed120473ecd01cc540bcb"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e294d4cff8d5e1fce7e7e3ce423a9f57280bebc8da9025d8eeff0cf855aee58"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4701bd29c7c00213e3a3b0b8ed4e95f28bf351f75ac05833ed871cafeb345a3"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c8c6463b134dc223741c6bc6de2f719099f4bf2079db4f972bce78236b4f24a"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8b7166ce1163afa955305e9a025bed54cc128b49a3435ead2ea59285747fbfc"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc2c569e4c7d1caed6b9f3ae4684c3d0105b7f4e0708abaa0356734ffbff95ec"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c932bda4c818c45fb5214ec308a29092acf9a9c91033c9403dc6d33603bd8f09"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fc17a70b9429a39475b777838ed9ba490547487430cc46d7c66cf7a04fbd96b"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d3e7fe56d52b3e4bb9f3909317eb6ab524e738f2328a474ec57806771a7ace1"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5be1b0c5fae77f84c174e79a9b966f6f635f8c16c1b4d8d980fad7a219f57d56"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85e4705fad4bedeb178dd7ff4e4a462a2f91d9b79dee2ec362cc9f0d3cd49989"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0aecbc28fb7ba12a8a43357b5c112a40f1bdbfae06025d5cbebdb2caa4797de"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0519a44c36b94e5deaea12461adbe7c19cdd6aed2b87a4fac79c6d1e9800cd63"} {"level":"info","ts":"2026-07-23T19:57:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"error","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77"} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"error","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:58:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"error","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:58:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52714","PortSpecifier":{"PortValue":52714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52714","PortSpecifier":{"PortValue":52714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836710,"nanos":409080849},"http":{"id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/sub-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa19dc0b-317a-4be7-87cb-5fbb964d9077","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36500","PortSpecifier":{"PortValue":36500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36500","PortSpecifier":{"PortValue":36500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836710,"nanos":448148099},"http":{"id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/sub-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"919c4cbf-4ea5-4880-9b61-cb5826eb7ba9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52724","PortSpecifier":{"PortValue":52724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea6742fc-be13-42e8-9612-f60a822265e0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52724","PortSpecifier":{"PortValue":52724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836710,"nanos":485035099},"http":{"id":"ea6742fc-be13-42e8-9612-f60a822265e0","method":"GET","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Bb4j0XHUjWcPJmua_cnm4LyfITUdKuZJ6X6mLBWIcdwqV8mSDngDDoAqhlck"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Bb4j0XHUjWcPJmua_cnm4LyfITUdKuZJ6X6mLBWIcdwqV8mSDngDDoAqhlck\"}"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8345df0-b578-4600-ac4f-533bec2ba0d7","keyName":"e2e-sub-iso-46177b","subscription":"e2e-a-only-a965d1","tenant":"e2e-shared-a-459a5a","userId":"c8345df0-b578-4600-ac4f-533bec2ba0d7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/sub-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a965d1"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea6742fc-be13-42e8-9612-f60a822265e0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36510","PortSpecifier":{"PortValue":36510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36510","PortSpecifier":{"PortValue":36510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836710,"nanos":521709956},"http":{"id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","method":"GET","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YknkyOigVellFy1w_9b82eFwep5Y1JkeU6RFUPmqAc9bfhcjIkQJYxbVGvpI"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YknkyOigVellFy1w_9b82eFwep5Y1JkeU6RFUPmqAc9bfhcjIkQJYxbVGvpI\"}"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe2efd53-641a-42f0-93fd-e006f33f0ee6","keyName":"e2e-sub-iso-53de59","subscription":"e2e-b-only-a965d1","tenant":"e2e-shared-b-829079","userId":"fe2efd53-641a-42f0-93fd-e006f33f0ee6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/sub-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a965d1"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9d94ed7-ec46-49b3-9161-dbedc9198dc3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60590","PortSpecifier":{"PortValue":60590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60590","PortSpecifier":{"PortValue":60590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836720,"nanos":481406691},"http":{"id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/sub-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0123f5f3-4435-4dfb-9949-4b0cff75b8d8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43242","PortSpecifier":{"PortValue":43242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43242","PortSpecifier":{"PortValue":43242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836720,"nanos":511441880},"http":{"id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/sub-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80ed11ad-c7a2-48ed-82ce-bea5f754fd29","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60600","PortSpecifier":{"PortValue":60600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60600","PortSpecifier":{"PortValue":60600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836720,"nanos":549517249},"http":{"id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13Ae0GdBd5OFZIfqs_sxSOMnT4hLL0GxNp3uw73vcV0yAf7BCl8vmVP7tyGR6"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13Ae0GdBd5OFZIfqs_sxSOMnT4hLL0GxNp3uw73vcV0yAf7BCl8vmVP7tyGR6\"}"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da4cfdec-edf9-46b7-b5ce-7786115973fc","keyName":"e2e-sub-iso-db113c","subscription":"e2e-shared-sub-3762f1","tenant":"e2e-shared-a-459a5a","userId":"da4cfdec-edf9-46b7-b5ce-7786115973fc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/sub-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3762f1"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18732a14-44c1-40c6-9bfa-8eff6032a3eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43250","PortSpecifier":{"PortValue":43250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43250","PortSpecifier":{"PortValue":43250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836720,"nanos":575679380},"http":{"id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d5ZH3CVUtO8BDQ0H_wru1iTlfCVH92syaWzGG6523J3TZrmGRoLn8FA6IdJc"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d5ZH3CVUtO8BDQ0H_wru1iTlfCVH92syaWzGG6523J3TZrmGRoLn8FA6IdJc\"}"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dc7f53c3-3a11-4994-8629-11be48055482","keyName":"e2e-sub-iso-95664e","subscription":"e2e-shared-sub-3762f1","tenant":"e2e-shared-b-829079","userId":"dc7f53c3-3a11-4994-8629-11be48055482","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/sub-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3762f1"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T19:58:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d25c606b-f5a5-4e56-aeac-2418d8dbb423","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eecb571c42c144d56747cf5939622e273121dc711f6229739e69192e2008eb8f"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a5e1652f938a248c645cfeac399cc0955ac08aa6de0a49a05c336b29165d4d54"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d528988f651842696cfa33599b209b323fab96f55a1d92cc1bc5b8648e2b3bac"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98203ea7c0cc17d643b3fc2e79b4ee06b420d45dc5eb8858583300ea9cdc915d"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80e2a4f44c1b379e99bd9d03923307c3d150a963d0f43be78d8f2f1835ccf23a"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1355eab291959a3f195d94e59a03efb94e01173c5ea2569513807c2eedf98790"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b38c881fb1ba783780e60a5eb9b908fe6b13e63994d2ffa05a5aee9a50e52c4d"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6b72e1669ac0cca335725abad154c80eb418e9ebf339810eacd44e9780f42f0"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0e4a4b8f1bee072a24baf39f3903ca7203b9f216cfcedc2e93dd910ee77d52e"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/745d932571f58359e95a21550dd94228546dc6040048167b26dba260490cf69c"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/532651dec05822da4446e8566515fe6687d9299fc726b44e1346e6854611db77"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79b420c02736e4dc0a9df645d5466fb0732a0ea90c876c9b66c61df69ded4448"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a1985288c36e2e15895816bfbf56b71950e303d7bc2b6f11bdbf3cab3827bcf"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T19:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"info","ts":"2026-07-23T19:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eb21fbf9f1e2ba70dbc4553ff1d65fb6568b2c63b0788c88ce4bf5d33d23821"} {"level":"info","ts":"2026-07-23T19:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/834249e3024798595b54e09687082a6fb91996c4fe3e9a19afd19ba46ba7186d"} {"level":"info","ts":"2026-07-23T19:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f1a36713d7b66acf4f02a5478e86576d7d60c1dffdc7dbc83b6e81c16e67cf1"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5"} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T19:59:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T19:59:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"error","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9"} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T20:00:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"} {"level":"info","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T20:00:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T20:00:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"info","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58246","PortSpecifier":{"PortValue":58246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58246","PortSpecifier":{"PortValue":58246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836806,"nanos":105769807},"http":{"id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe3e585f-357b-424e-8fa1-b6fb15df76ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51056","PortSpecifier":{"PortValue":51056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51056","PortSpecifier":{"PortValue":51056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836806,"nanos":147168751},"http":{"id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/rate-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"048889d2-22d2-4ad8-8f28-a2b3b1247f98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58260","PortSpecifier":{"PortValue":58260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e26d8130-bed0-40da-af78-2f8efea2ec25","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58260","PortSpecifier":{"PortValue":58260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836806,"nanos":185951882},"http":{"id":"e26d8130-bed0-40da-af78-2f8efea2ec25","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e26d8130-bed0-40da-af78-2f8efea2ec25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58262","PortSpecifier":{"PortValue":58262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bbe22f6-52f2-40e5-8163-203094441f9b","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58262","PortSpecifier":{"PortValue":58262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836807,"nanos":245816227},"http":{"id":"0bbe22f6-52f2-40e5-8163-203094441f9b","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bbe22f6-52f2-40e5-8163-203094441f9b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58276","PortSpecifier":{"PortValue":58276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0647c3cd-99e5-4147-832f-a7453df214ed","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58276","PortSpecifier":{"PortValue":58276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836808,"nanos":283658546},"http":{"id":"0647c3cd-99e5-4147-832f-a7453df214ed","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0647c3cd-99e5-4147-832f-a7453df214ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a227867-10ad-4b63-8277-add5e543e220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58280","PortSpecifier":{"PortValue":58280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a227867-10ad-4b63-8277-add5e543e220","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a227867-10ad-4b63-8277-add5e543e220","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58280","PortSpecifier":{"PortValue":58280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836809,"nanos":323447964},"http":{"id":"4a227867-10ad-4b63-8277-add5e543e220","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a227867-10ad-4b63-8277-add5e543e220","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a227867-10ad-4b63-8277-add5e543e220","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a227867-10ad-4b63-8277-add5e543e220","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a227867-10ad-4b63-8277-add5e543e220","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58284","PortSpecifier":{"PortValue":58284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58284","PortSpecifier":{"PortValue":58284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836810,"nanos":357830769},"http":{"id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d2ef121-7b0c-4aec-ba23-a900674cd18b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53442","PortSpecifier":{"PortValue":53442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53442","PortSpecifier":{"PortValue":53442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836811,"nanos":397426977},"http":{"id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb8f7e69-b8e5-4a4f-af74-0c92db930bc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53448","PortSpecifier":{"PortValue":53448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"045902b2-ddb5-44c3-abf8-c52f09120e97","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53448","PortSpecifier":{"PortValue":53448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836812,"nanos":431986878},"http":{"id":"045902b2-ddb5-44c3-abf8-c52f09120e97","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"045902b2-ddb5-44c3-abf8-c52f09120e97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53454","PortSpecifier":{"PortValue":53454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53454","PortSpecifier":{"PortValue":53454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836813,"nanos":466408434},"http":{"id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JV9mTPu2rJPPNALm_a67DrlWhTVZtbJYrsMd7ewEMMS8nxNLaM4UK7MlnfFB\"}"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","subscription":"e2e-rate-iso-a-e09818","tenant":"e2e-shared-a-459a5a","userId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-e09818\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e09818"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cd6e16c2-6c54-4916-a5a2-cdde65c77cd3","keyName":"e2e-rate-a-e09818","selected_subscription":"e2e-rate-iso-a-e09818","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-e09818@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e09818","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"871fd327-5f9c-4d60-8ddc-2e8a161e2d6d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55810","PortSpecifier":{"PortValue":55810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55810","PortSpecifier":{"PortValue":55810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836822,"nanos":45108817},"http":{"id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a2a345b9-fcbb-4a8d-bc0c-8f3df6c36edf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48014","PortSpecifier":{"PortValue":48014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5c717a2-29a2-40d5-b355-022216ff0451","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48014","PortSpecifier":{"PortValue":48014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836822,"nanos":78272709},"http":{"id":"b5c717a2-29a2-40d5-b355-022216ff0451","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"]}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/dd34667a78c6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=15a4e93e-966d-4104-abd4-e3cc15cd28c2"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2ae20781-ffad-4c45-b99b-81e537399fc2","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/rate-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5c717a2-29a2-40d5-b355-022216ff0451","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55824","PortSpecifier":{"PortValue":55824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"336c8c99-5690-44e8-a8bd-84298e252df5","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55824","PortSpecifier":{"PortValue":55824}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836822,"nanos":111367549},"http":{"id":"336c8c99-5690-44e8-a8bd-84298e252df5","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NAAosjSsQ0I3b08t_XRxkDOwxIYgj0qlozbG2JMUqo3hxPGpudccH9R4U8im"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NAAosjSsQ0I3b08t_XRxkDOwxIYgj0qlozbG2JMUqo3hxPGpudccH9R4U8im\"}"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","keyName":"e2e-rate-a-7deea4","subscription":"e2e-rate-iso-a-7deea4","tenant":"e2e-shared-a-459a5a","userId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-7deea4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7deea4","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7deea4"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","keyName":"e2e-rate-a-7deea4","selected_subscription":"e2e-rate-iso-a-7deea4","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-7deea4@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7deea4","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"336c8c99-5690-44e8-a8bd-84298e252df5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55830","PortSpecifier":{"PortValue":55830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"242c6dd6-edb9-4320-bce7-918b3aabff25","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55830","PortSpecifier":{"PortValue":55830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836823,"nanos":148581209},"http":{"id":"242c6dd6-edb9-4320-bce7-918b3aabff25","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NAAosjSsQ0I3b08t_XRxkDOwxIYgj0qlozbG2JMUqo3hxPGpudccH9R4U8im"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NAAosjSsQ0I3b08t_XRxkDOwxIYgj0qlozbG2JMUqo3hxPGpudccH9R4U8im\"}"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","keyName":"e2e-rate-a-7deea4","subscription":"e2e-rate-iso-a-7deea4","tenant":"e2e-shared-a-459a5a","userId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-7deea4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7deea4","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7deea4"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","keyName":"e2e-rate-a-7deea4","selected_subscription":"e2e-rate-iso-a-7deea4","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-7deea4@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7deea4","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"242c6dd6-edb9-4320-bce7-918b3aabff25","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55836","PortSpecifier":{"PortValue":55836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","method":"POST","path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions","host":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55836","PortSpecifier":{"PortValue":55836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836824,"nanos":181449322},"http":{"id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","method":"POST","headers":{":authority":"e2e-shared-a-459a5a.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NAAosjSsQ0I3b08t_XRxkDOwxIYgj0qlozbG2JMUqo3hxPGpudccH9R4U8im"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NAAosjSsQ0I3b08t_XRxkDOwxIYgj0qlozbG2JMUqo3hxPGpudccH9R4U8im\"}"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","keyName":"e2e-rate-a-7deea4","subscription":"e2e-rate-iso-a-7deea4","tenant":"e2e-shared-a-459a5a","userId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\",\"requestedSubscription\":\"e2e-rate-iso-a-7deea4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-459a5a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7deea4","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-459a5a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7deea4"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ef45d1e-834a-4ad3-94a5-fa11c6eb72f4","keyName":"e2e-rate-a-7deea4","selected_subscription":"e2e-rate-iso-a-7deea4","selected_subscription_key":"ai-tenant-e2e-shared-a-459a5a/e2e-rate-iso-a-7deea4@ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-459a5a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7deea4","namespace":"ai-tenant-e2e-shared-a-459a5a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-459a5a/rate-test-model-459a5a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8594e980-74ae-45ad-a077-9fedfeba0fdd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48018","PortSpecifier":{"PortValue":48018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41b8d70c-afce-474d-80fd-b191bfe898c2","method":"POST","path":"/ai-tenant-e2e-shared-b-829079/rate-test-model-829079/v1/completions","host":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48018","PortSpecifier":{"PortValue":48018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784836824,"nanos":217317133},"http":{"id":"41b8d70c-afce-474d-80fd-b191bfe898c2","method":"POST","headers":{":authority":"e2e-shared-b-829079.apps.438ec68a-cdbd-4db7-a174-dd34667a78c6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-829079/rate-test-model-829079/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OLwEm7i1OtwvyzGD_oi8x8nVD7hQg14AfJHcZGVRfXkXejOtTRyKvWyaCw5F"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OLwEm7i1OtwvyzGD_oi8x8nVD7hQg14AfJHcZGVRfXkXejOtTRyKvWyaCw5F\"}"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1fcc1322-6676-42e9-a929-84d8478f6c3b","keyName":"e2e-rate-b-7deea4","subscription":"e2e-rate-iso-b-7deea4","tenant":"e2e-shared-b-829079","userId":"1fcc1322-6676-42e9-a929-84d8478f6c3b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-829079/rate-test-model-829079\",\"requestedSubscription\":\"e2e-rate-iso-b-7deea4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-829079.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-829079","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7deea4","namespace":"ai-tenant-e2e-shared-b-829079","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-829079/rate-test-model-829079"}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-829079/rate-test-model-829079\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-829079/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7deea4"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1fcc1322-6676-42e9-a929-84d8478f6c3b","keyName":"e2e-rate-b-7deea4","selected_subscription":"e2e-rate-iso-b-7deea4","selected_subscription_key":"ai-tenant-e2e-shared-b-829079/e2e-rate-iso-b-7deea4@ai-tenant-e2e-shared-b-829079/rate-test-model-829079","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-829079","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7deea4","namespace":"ai-tenant-e2e-shared-b-829079","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-829079/rate-test-model-829079"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T20:00:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41b8d70c-afce-474d-80fd-b191bfe898c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8706e31cb4d4d7d00b58da6de42453e348e9724f7d019cfa273075a698e25549"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16deb1fb81467647c16c5953dcd4582f5bb9ed6a5808186098b2074b2ea644bb"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9ab757776b1cd206cf00f8e9fc8dd18d7ed41cbbebfe75a02c356da8b6e2dd3"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cccbe84f7a1f1420d47f4073710999f3a5c63b86106425fb62c007cdb7c427e4"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2169922e2b4df92e0710b42b812c7e022e14130380ab0cec1e9c7b5c7dfa24c"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9430316220473e0d308b3ba396745dd2e9584297a1d4ad223f2735ace3753e2"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b80fe57128a50597e15890147fa33361217dcf52ab5e3dbfe13cb9114e90286"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c2079275bf880f1ae226da064bed0d341a877a16ff4743f74cb319c92d17fb5"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6eb2250104c5b307e888a741d1290bae1bc167e361e7b3fcbd50bdd181a0f7f"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd525f1d7a436177961a70accfa946199faedc0af125d6de0f6e3288217378"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82cce104e372959cd8d6f4b1791493dfc4279bf9e994c3119e486461537032fd"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9a85465bcce4cd7b0f7cdb37a2bc7b35f2ecf3d48787f6e1b3f29f72ad04132"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40f6a7ec9da6d389f2ed14cfc55061b731fcefc562703c600a758670b4d17a58"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90895e0eaed7296da23ffc257f39079c84a87451150489dc0ee603ab2890def9"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fec09359323ce39310da2d961e0b7f169e18b4e9db22a06823bfb799abe2c83f"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fe7835b8e8a13d5627357e593a664efe2a629375c42ce864fdc687c1970f20c"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fea2d1ab37a7e9c174b2639cb45a7c14a7f6aed18dcf242455133b7deeca001d"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e29b7918898b92a2e2bf2161567a36e07645cfbb5df755e2968110bb0df8a163"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4edca761511b473d94a0a1419ea33590629673a11db958209f8b650b6637bcf"} {"level":"info","ts":"2026-07-23T20:00:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57537bc5aeff9823cf5d87ba205537c7a21681b3ccae7e702a5b5f7ff71705cb"} {"level":"info","ts":"2026-07-23T20:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e18604da38081cc8179de21806ddbad817ad7e08052f36e9d9161bab41e9c6"} {"level":"info","ts":"2026-07-23T20:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c5f4d3f397139210d7d6b31e4f7fa32f0c681455ac30d121f4c69ebcf52004c"} {"level":"info","ts":"2026-07-23T20:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95cf999a25c9beab9d60e1873e1bb4438ae9080ddefd9b5cd07bf3c8bb13bbfc"} {"level":"info","ts":"2026-07-23T20:00:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab1bbca26f27c6d3b676424e3f63afd2ee93c2ce7995c2ecbf1ae28fdaea4ab8"}