--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"error","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:58:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"error","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"error","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:58:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:58:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:58:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"error","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:58:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39786","PortSpecifier":{"PortValue":39786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39786","PortSpecifier":{"PortValue":39786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800725,"nanos":970334107},"http":{"id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:58:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0199dbde-73ff-4dbe-979b-e0f88d404ce5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58982","PortSpecifier":{"PortValue":58982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58982","PortSpecifier":{"PortValue":58982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800726,"nanos":1892157},"http":{"id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/auth-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f7be168-bdc1-47f9-b798-a0ab7975f2b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58992","PortSpecifier":{"PortValue":58992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58992","PortSpecifier":{"PortValue":58992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800726,"nanos":64106712},"http":{"id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","method":"GET","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f973OJaJbBOUa1kE_dJefVy8ZDWVIxTzJelPLr8Pdy51BDGPZ8vriAUXryh6"} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f973OJaJbBOUa1kE_dJefVy8ZDWVIxTzJelPLr8Pdy51BDGPZ8vriAUXryh6\"}"} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-23T09:58:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d15c6ce-69b4-47ae-bccc-55a644334c83","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:58:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60812","PortSpecifier":{"PortValue":60812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60812","PortSpecifier":{"PortValue":60812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800748,"nanos":522264756},"http":{"id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c3a08dc-e7be-4bf0-b2df-8dcee33e25b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42258","PortSpecifier":{"PortValue":42258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42258","PortSpecifier":{"PortValue":42258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800748,"nanos":564408821},"http":{"id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/auth-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28c2d7b-4bf2-4339-8208-96c5c3f54c14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60816","PortSpecifier":{"PortValue":60816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60816","PortSpecifier":{"PortValue":60816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800748,"nanos":602731527},"http":{"id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"823cc4ee-28c1-4e28-b4c2-06e02e39c9ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42266","PortSpecifier":{"PortValue":42266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42266","PortSpecifier":{"PortValue":42266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800748,"nanos":640955267},"http":{"id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/auth-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20238ddd-c8fe-45f1-a316-74ab95650ba6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"error","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"error","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35086","PortSpecifier":{"PortValue":35086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e57ba12b-3e30-46f4-a177-fef157a73b83","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35086","PortSpecifier":{"PortValue":35086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800765,"nanos":889592536},"http":{"id":"e57ba12b-3e30-46f4-a177-fef157a73b83","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e57ba12b-3e30-46f4-a177-fef157a73b83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34494","PortSpecifier":{"PortValue":34494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34494","PortSpecifier":{"PortValue":34494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800765,"nanos":925560283},"http":{"id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/auth-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fdcad75-1d8c-4788-b505-99b5e48ed19c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34510","PortSpecifier":{"PortValue":34510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f46492c9-0276-4f26-aa62-3e97e614a31c","method":"GET","path":"/maas-api/v1/api-keys/588a5a1b-10fc-464e-89eb-a28717c5780e","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34510","PortSpecifier":{"PortValue":34510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800765,"nanos":965459163},"http":{"id":"f46492c9-0276-4f26-aa62-3e97e614a31c","method":"GET","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588a5a1b-10fc-464e-89eb-a28717c5780e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588a5a1b-10fc-464e-89eb-a28717c5780e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/auth-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f46492c9-0276-4f26-aa62-3e97e614a31c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","method":"GET","path":"/maas-api/v1/api-keys/588a5a1b-10fc-464e-89eb-a28717c5780e","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800766,"nanos":33125306},"http":{"id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","method":"GET","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588a5a1b-10fc-464e-89eb-a28717c5780e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588a5a1b-10fc-464e-89eb-a28717c5780e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4ff560f-eeb3-4dbc-b384-56cf084c4d31","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"error","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T09:59:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"error","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T09:59:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45808","PortSpecifier":{"PortValue":45808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45808","PortSpecifier":{"PortValue":45808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800783,"nanos":297141952},"http":{"id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5717739c-3bfe-4d49-8ad1-6b73f786b713","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56176","PortSpecifier":{"PortValue":56176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73c9d403-d7e4-47bb-b57b-6454386df421","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:56176","PortSpecifier":{"PortValue":56176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800783,"nanos":335069895},"http":{"id":"73c9d403-d7e4-47bb-b57b-6454386df421","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/auth-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c9d403-d7e4-47bb-b57b-6454386df421","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45820","PortSpecifier":{"PortValue":45820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7542f6ac-9e5d-4974-900a-775ccc677511","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45820","PortSpecifier":{"PortValue":45820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800783,"nanos":397883176},"http":{"id":"7542f6ac-9e5d-4974-900a-775ccc677511","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XJUtrkYlKNHeVkCf_RcYQ9lWw4JU7cyLywbNEfBIhVXiwADWzDqMtl5IR8P6"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XJUtrkYlKNHeVkCf_RcYQ9lWw4JU7cyLywbNEfBIhVXiwADWzDqMtl5IR8P6\"}"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff5b62ca-f270-462c-ae1e-b0074bc6407b","keyName":"e2e-auth-iso-a-19426b","subscription":"e2e-auth-iso-e90e1f","tenant":"e2e-shared-a-efdc11","userId":"ff5b62ca-f270-462c-ae1e-b0074bc6407b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/auth-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e90e1f"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T09:59:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7542f6ac-9e5d-4974-900a-775ccc677511","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/781375359c54e18602d94fe0e1b7d3e5dd47ebf987cb1abfe09bb2d8765f6bbd"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd3be639e8976a56f3b900018f9e5cb68df51efb32c911b493d6501586172f7a"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32dc0dae5f1a1c9d79c4254af029cf0a33e575a1c46644ebab1cf73936c542f8"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15972b2055a580d9304e6f363e81d600346ae7d64a06831eb3a052dcd8a429b5"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873c2ef7d13ff8ed5fd18b4bafcd049ba6ba411e455392fbbd1a9e5a372db152"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9792d21a9ef59fe80ec28f356b142a935a1cc4f852e6e0309a4280e46c3e1743"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbca7eab7e4c198b3bb78b905123e5773ec77d6200db379d2e880b8c0bb77440"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a474715599f8d19dfcbf7e790d0c6f04c734217b15105e13b65144dccc0ec847"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c6d0ba83e7a35e42318512ded60a370565890a6f971211df7113a2932591b9"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27a66071007e4788bf4432071e358f33a87c3bc198931dfce71d079622d62cf6"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f93fb90a23a67e662184a2f372c79bccef62966bfd86942cd6e124fb5b5f54ac"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b68fd65499d157651c303f20857c03b476dea641bfbe6de34b7046bc5936f51"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f17bc0ca65d134e336168bbc5afc2cfaca96b404bb79674cfa6b68a0e2cb165"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffa3920760451bd20f5865925b8764ddb17c4178f0b8f5c5326e4b2b96f6923d"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52b8209900f42e4c005acefd5fc6e758dc1fc41244d8c3edbd552a8a0174fba"} {"level":"info","ts":"2026-07-23T09:59:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/179adc9683a3bc32c8f11708bf902679456adca2f5f4ea9426f8eddf76d12301"} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1"} {"level":"info","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e"} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:00:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122"} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:00:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35968","PortSpecifier":{"PortValue":35968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f939415a-4db5-41b5-a052-5a71d588ce48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35968","PortSpecifier":{"PortValue":35968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800860,"nanos":796220796},"http":{"id":"f939415a-4db5-41b5-a052-5a71d588ce48","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/sub-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f939415a-4db5-41b5-a052-5a71d588ce48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c49d3697-0757-469a-852d-c572a994ca6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c49d3697-0757-469a-852d-c572a994ca6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c49d3697-0757-469a-852d-c572a994ca6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800860,"nanos":837182173},"http":{"id":"c49d3697-0757-469a-852d-c572a994ca6a","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c49d3697-0757-469a-852d-c572a994ca6a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c49d3697-0757-469a-852d-c572a994ca6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/sub-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c49d3697-0757-469a-852d-c572a994ca6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c49d3697-0757-469a-852d-c572a994ca6a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c49d3697-0757-469a-852d-c572a994ca6a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35978","PortSpecifier":{"PortValue":35978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35978","PortSpecifier":{"PortValue":35978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800860,"nanos":876678278},"http":{"id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","method":"GET","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xKexzoYdW71xsBBX_McwFGC3YRoq3O1dsvznL7KcYuSLIFTHgqqS8FkXpOw3"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xKexzoYdW71xsBBX_McwFGC3YRoq3O1dsvznL7KcYuSLIFTHgqqS8FkXpOw3\"}"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"018a2930-42d0-4db3-b193-aca45b0ac9b7","keyName":"e2e-sub-iso-e74ad9","subscription":"e2e-a-only-540cc9","tenant":"e2e-shared-a-efdc11","userId":"018a2930-42d0-4db3-b193-aca45b0ac9b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/sub-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-540cc9"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7161d66-5c29-4318-b6b0-3fe1bffb18b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44056","PortSpecifier":{"PortValue":44056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71f8876a-b416-498e-9619-42e4e9fe1092","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:44056","PortSpecifier":{"PortValue":44056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800860,"nanos":916900747},"http":{"id":"71f8876a-b416-498e-9619-42e4e9fe1092","method":"GET","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1UEb8hMKrQDCp9D62_WD0bPO46Sk1tC8W6ZatjmETsuLijKnbe9BtpvbEscOa"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1UEb8hMKrQDCp9D62_WD0bPO46Sk1tC8W6ZatjmETsuLijKnbe9BtpvbEscOa\"}"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"274dad3d-cc92-4711-b21e-c211aa8ceab2","keyName":"e2e-sub-iso-d1d32f","subscription":"e2e-b-only-540cc9","tenant":"e2e-shared-b-0dc985","userId":"274dad3d-cc92-4711-b21e-c211aa8ceab2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/sub-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-540cc9"} {"level":"info","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71f8876a-b416-498e-9619-42e4e9fe1092","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32970","PortSpecifier":{"PortValue":32970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800875,"nanos":333608273},"http":{"id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/sub-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63e5b7f3-6593-4bbb-8f37-87f94afb0b11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52310","PortSpecifier":{"PortValue":52310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52310","PortSpecifier":{"PortValue":52310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800875,"nanos":376042413},"http":{"id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/sub-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a191744-0fa9-42e2-810c-60cb3ee68c1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32974","PortSpecifier":{"PortValue":32974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:32974","PortSpecifier":{"PortValue":32974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800875,"nanos":415010639},"http":{"id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wobJ7MexEfAOeliv_QcRkl3L2WomQuMoTy0ebke7TTjkh0nsZfn4VmrZRxZB"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wobJ7MexEfAOeliv_QcRkl3L2WomQuMoTy0ebke7TTjkh0nsZfn4VmrZRxZB\"}"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d803bddd-7d70-4897-90ac-029da33d163e","keyName":"e2e-sub-iso-0df7ee","subscription":"e2e-shared-sub-45d636","tenant":"e2e-shared-a-efdc11","userId":"d803bddd-7d70-4897-90ac-029da33d163e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/sub-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-45d636"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad2e599c-56cc-45bd-a3e5-c31397cc8aa5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52314","PortSpecifier":{"PortValue":52314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52314","PortSpecifier":{"PortValue":52314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800875,"nanos":443648007},"http":{"id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vED2uJHavtCDx3SZ_bL7sFAsU6VxaEzuWJwPQHSG5Sr3eZBO6Qj3YxWqAPMT"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vED2uJHavtCDx3SZ_bL7sFAsU6VxaEzuWJwPQHSG5Sr3eZBO6Qj3YxWqAPMT\"}"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e407495-bcd5-4bd8-a2f6-c8a2eadbb670","keyName":"e2e-sub-iso-adf979","subscription":"e2e-shared-sub-45d636","tenant":"e2e-shared-b-0dc985","userId":"0e407495-bcd5-4bd8-a2f6-c8a2eadbb670","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/sub-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-45d636"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:01:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e17076c4-3a38-42b1-baf4-b1c9784b8b3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T10:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af183281381df2dceb24a2e84d13025b9519aab2c38d3e9ebd5bc203cca0902e"} {"level":"info","ts":"2026-07-23T10:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T10:01:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89ea11418abcd4e6b252aa3a50bcf6bd036c3b3835372bc104424326ae6c45c3"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47cff6b117d682eceb4c53e99abb223ead5f61a13fe1a4b1d0f9b7405d1194ae"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e768a52896ae2158ca1017cebcad9db33b1229239046f0ea5cd8f57b5f741481"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2eba3c12eaa45fd72f406939a75703de0e195d231782f5b50d05e6a2686af6e5"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7329fc019219bac9b699133140fee0dda4b655d9344d8ad6454abb0e8a32c4fb"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89657f309c8984a8cf8b1f2cea8b0720d4442c018565bd7acfeae9de6b4ba3b8"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/609b8462d8fc979d7d910e9355bb47027bc796c76c478ef72ad6de5195427ad3"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d343f3734170612b167ee730839d545f75516bc569df4659384a97def01b991"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41f46cac9243d29575901a873c13c23e733183d42c2c1f059294858f04d760e4"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bd3c507330134e3f40161bbcae214fa09f6d22e7d8ad8a99f2668e63710549f"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/896f826169ac17fe7bae1337afadc2b41ddb8e5555b9ecdd7a6052efc52ec7f1"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3610c53fa0a0519116533aee938b437d01bd82306d199cfd5108f681d1732fb0"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb2536ce915f35352b1f376d2db9ad583fb5f1405d35b168e16ea3dba8fad122"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23d667a249fdc76d26f54c4249fb7da6ae50deb8a57da63f9196d66690707089"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:01:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc5037cc78ae59477878aae0da419d5ad4a0121162d2ab96afea1fef1b514651"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"error","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a"} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a"} {"level":"error","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"} {"level":"error","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086"} {"level":"error","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883"} {"level":"info","ts":"2026-07-23T10:02:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:02:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b"} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:02:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5"} {"level":"info","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"195ce707-c302-4aa7-8684-3640430285d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49118","PortSpecifier":{"PortValue":49118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"195ce707-c302-4aa7-8684-3640430285d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"195ce707-c302-4aa7-8684-3640430285d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49118","PortSpecifier":{"PortValue":49118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800935,"nanos":953529572},"http":{"id":"195ce707-c302-4aa7-8684-3640430285d5","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"195ce707-c302-4aa7-8684-3640430285d5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"195ce707-c302-4aa7-8684-3640430285d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline","msg":"skipping config","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"context canceled"} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"195ce707-c302-4aa7-8684-3640430285d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"195ce707-c302-4aa7-8684-3640430285d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"195ce707-c302-4aa7-8684-3640430285d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51310","PortSpecifier":{"PortValue":51310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51310","PortSpecifier":{"PortValue":51310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800936,"nanos":22688607},"http":{"id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a452dc3-8438-4726-a6fc-17f5ee191e68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49134","PortSpecifier":{"PortValue":49134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73ab7771-f373-4247-b0a8-ef7d3114f513","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49134","PortSpecifier":{"PortValue":49134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800936,"nanos":73131751},"http":{"id":"73ab7771-f373-4247-b0a8-ef7d3114f513","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73ab7771-f373-4247-b0a8-ef7d3114f513","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49148","PortSpecifier":{"PortValue":49148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1824d099-ac15-4bfe-856c-f1951ef46b63","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49148","PortSpecifier":{"PortValue":49148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800937,"nanos":135606326},"http":{"id":"1824d099-ac15-4bfe-856c-f1951ef46b63","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1824d099-ac15-4bfe-856c-f1951ef46b63","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be436f1-dd03-499d-803e-42e69947eb24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49164","PortSpecifier":{"PortValue":49164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0be436f1-dd03-499d-803e-42e69947eb24","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0be436f1-dd03-499d-803e-42e69947eb24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49164","PortSpecifier":{"PortValue":49164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800938,"nanos":173808637},"http":{"id":"0be436f1-dd03-499d-803e-42e69947eb24","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0be436f1-dd03-499d-803e-42e69947eb24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0be436f1-dd03-499d-803e-42e69947eb24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be436f1-dd03-499d-803e-42e69947eb24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0be436f1-dd03-499d-803e-42e69947eb24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49166","PortSpecifier":{"PortValue":49166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49166","PortSpecifier":{"PortValue":49166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800939,"nanos":214733397},"http":{"id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"670d3473-02ae-4407-982f-fe3a1b54f8ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34242","PortSpecifier":{"PortValue":34242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34242","PortSpecifier":{"PortValue":34242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800940,"nanos":250648859},"http":{"id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95f00bd7-6c7a-4ebc-a742-385d7f4364db","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34256","PortSpecifier":{"PortValue":34256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34256","PortSpecifier":{"PortValue":34256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800941,"nanos":290116384},"http":{"id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fa43dd9-afd3-4f05-8561-7e3b2d818ef0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34260","PortSpecifier":{"PortValue":34260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34260","PortSpecifier":{"PortValue":34260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800942,"nanos":331092243},"http":{"id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0831f76e-5ddf-4eff-b02e-4d2a064310c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34264","PortSpecifier":{"PortValue":34264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae81071c-70e9-492b-a426-ba2c08af9814","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34264","PortSpecifier":{"PortValue":34264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800943,"nanos":378208753},"http":{"id":"ae81071c-70e9-492b-a426-ba2c08af9814","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6IBJeHxBJI3GPMj8_kwhAtESVBrP0IN78qKXaIhyuiHeXs88suVWyw3tgVC3\"}"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","subscription":"e2e-rate-iso-a-4ef905","tenant":"e2e-shared-a-efdc11","userId":"a9501542-f645-4547-a3d2-e20ba440f553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-4ef905\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4ef905"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9501542-f645-4547-a3d2-e20ba440f553","keyName":"e2e-rate-a-4ef905","selected_subscription":"e2e-rate-iso-a-4ef905","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-4ef905@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4ef905","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae81071c-70e9-492b-a426-ba2c08af9814","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37250","PortSpecifier":{"PortValue":37250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37250","PortSpecifier":{"PortValue":37250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800952,"nanos":188350739},"http":{"id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"593376e9-d05f-4159-a6a3-ecf24e25d61d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42110","PortSpecifier":{"PortValue":42110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42110","PortSpecifier":{"PortValue":42110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800952,"nanos":255369752},"http":{"id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"]}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/611ee6343498"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=32930d38-94e4-4584-ae46-de78d2cf732f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"72e90060-73aa-4b09-a2df-b1e93b8daa0f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"276df37c-d6ab-48ea-a012-aa74208a9c1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37254","PortSpecifier":{"PortValue":37254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37254","PortSpecifier":{"PortValue":37254}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800952,"nanos":321843208},"http":{"id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zXhH6ZnHSGFD9BWT_hijnVvcJRSQq1S5QisrsookzjEN6YezONznWq7TkZuQ"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zXhH6ZnHSGFD9BWT_hijnVvcJRSQq1S5QisrsookzjEN6YezONznWq7TkZuQ\"}"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","keyName":"e2e-rate-a-513a8e","subscription":"e2e-rate-iso-a-513a8e","tenant":"e2e-shared-a-efdc11","userId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-513a8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-513a8e","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-513a8e"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","keyName":"e2e-rate-a-513a8e","selected_subscription":"e2e-rate-iso-a-513a8e","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-513a8e@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-513a8e","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c6f72e2-a4f6-40db-90c8-7f667b1a4178","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2000085d-5078-4702-84b8-942ff52b7781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37270","PortSpecifier":{"PortValue":37270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2000085d-5078-4702-84b8-942ff52b7781","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2000085d-5078-4702-84b8-942ff52b7781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37270","PortSpecifier":{"PortValue":37270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800953,"nanos":357513966},"http":{"id":"2000085d-5078-4702-84b8-942ff52b7781","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zXhH6ZnHSGFD9BWT_hijnVvcJRSQq1S5QisrsookzjEN6YezONznWq7TkZuQ"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zXhH6ZnHSGFD9BWT_hijnVvcJRSQq1S5QisrsookzjEN6YezONznWq7TkZuQ\"}"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","keyName":"e2e-rate-a-513a8e","subscription":"e2e-rate-iso-a-513a8e","tenant":"e2e-shared-a-efdc11","userId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-513a8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-513a8e","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2000085d-5078-4702-84b8-942ff52b7781","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-513a8e"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2000085d-5078-4702-84b8-942ff52b7781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","keyName":"e2e-rate-a-513a8e","selected_subscription":"e2e-rate-iso-a-513a8e","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-513a8e@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-513a8e","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2000085d-5078-4702-84b8-942ff52b7781","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2000085d-5078-4702-84b8-942ff52b7781","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37274","PortSpecifier":{"PortValue":37274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","method":"POST","path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions","host":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37274","PortSpecifier":{"PortValue":37274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800954,"nanos":395826907},"http":{"id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","method":"POST","headers":{":authority":"e2e-shared-a-efdc11.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zXhH6ZnHSGFD9BWT_hijnVvcJRSQq1S5QisrsookzjEN6YezONznWq7TkZuQ"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zXhH6ZnHSGFD9BWT_hijnVvcJRSQq1S5QisrsookzjEN6YezONznWq7TkZuQ\"}"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","keyName":"e2e-rate-a-513a8e","subscription":"e2e-rate-iso-a-513a8e","tenant":"e2e-shared-a-efdc11","userId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\",\"requestedSubscription\":\"e2e-rate-iso-a-513a8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-efdc11.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-513a8e","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-efdc11/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-513a8e"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5f91b04b-ecf3-418e-a774-8bee3f328e38","keyName":"e2e-rate-a-513a8e","selected_subscription":"e2e-rate-iso-a-513a8e","selected_subscription_key":"ai-tenant-e2e-shared-a-efdc11/e2e-rate-iso-a-513a8e@ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-efdc11","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-513a8e","namespace":"ai-tenant-e2e-shared-a-efdc11","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-efdc11/rate-test-model-efdc11"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e4b8a8-87d5-4aa6-81e0-304312c585c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42112","PortSpecifier":{"PortValue":42112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","method":"POST","path":"/ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985/v1/completions","host":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42112","PortSpecifier":{"PortValue":42112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784800954,"nanos":432654449},"http":{"id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","method":"POST","headers":{":authority":"e2e-shared-b-0dc985.apps.511cade0-5236-434d-8397-611ee6343498.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sU1zaDVqSjK5Vpa9_MFcw6Y92wjxcC1ebVEv9MDQwyhaTuWFr9d6msB0F9JN"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sU1zaDVqSjK5Vpa9_MFcw6Y92wjxcC1ebVEv9MDQwyhaTuWFr9d6msB0F9JN\"}"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db08e28a-31df-4b37-a0c3-bb4926773142","keyName":"e2e-rate-b-513a8e","subscription":"e2e-rate-iso-b-513a8e","tenant":"e2e-shared-b-0dc985","userId":"db08e28a-31df-4b37-a0c3-bb4926773142","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985\",\"requestedSubscription\":\"e2e-rate-iso-b-513a8e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc985.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0dc985","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-513a8e","namespace":"ai-tenant-e2e-shared-b-0dc985","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985"}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc985/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-513a8e"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"db08e28a-31df-4b37-a0c3-bb4926773142","keyName":"e2e-rate-b-513a8e","selected_subscription":"e2e-rate-iso-b-513a8e","selected_subscription_key":"ai-tenant-e2e-shared-b-0dc985/e2e-rate-iso-b-513a8e@ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0dc985","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-513a8e","namespace":"ai-tenant-e2e-shared-b-0dc985","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-0dc985/rate-test-model-0dc985"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:02:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09aff1e5-3f4f-4d83-adae-ddfeff20241a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4e6695965dd4cd6f452d081b06862f2350e53d708fe4d2cf5164af9b208a16a"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70b1814fa0ffb3a2c52668fb4314abe8aaae9d893fcb87f5b3f2df92e4e50883"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7281d23dc2eabc3bdce36effbd8e35dc636303626e39155eb84ef79fa1caf76e"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fba423d05c659f8addcce5dde96d539d2d614a095148dc2705d042c016fdb642"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ead1176b1389b768564775d9cad6b3514a37bef03655eba319241cd4ca8785b"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11dc9319ffcdf572990d9a03e69510aa1dc6fea05bed5915a015ff359e5654b0"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e2e759bd584d696d268e520164c80413090a9f3f4ce881e0ff1bf5a7928fbf7"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d189935a20114a4f3fc81168c1ebe993771801d1d9ff74725f761ced47d67c3"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b1e7904c458857a09559a75bac3464044962f47d3a8f226f6684d1db3c9927a"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/009b288da72bbb6574b2b7941deaf71a21850773af02492926953d20ea855a35"} {"level":"info","ts":"2026-07-23T10:02:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0286345cf328955641620e83f62d37d701b9717ba39895aa4762f89849868e"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6d11a7869b5d178252ffff7228f2eb00fba0fa4e07454f8470521df264e52e4"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0038b8616ac3e52a3801ad75024062215cf82b593f9c5ad55db9f13dbafe349b"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce053e0c63d615a185923ae00a18181594b1c2a15c0eee08286621cd3aa30c39"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48a50c060a83f3e25dbc766f74ac3c347874ceff8c02fa59248326707db204f"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88c68921142f3841c33c409e4fe298c4ae35c2f84ddf26641ac9bac50d1b796a"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68a261c4c0e6c2b00ae44414659a7021bfb302eefc2177277822b733f9d94133"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c59def7ceb2714e56034af9f728a595f5c1c6795898a06f4d4389e2d4eeacc09"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/199814f7c9fba7bf5a4a441a8119ade09276f82a5302c731aea260c438bbaf8b"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9704fd22369d52f367cb9ccbb3361575e6d0f0dd5534660dfa99df10bd907a8"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a8df772d4bbf38632c32e4d3aa72852d7487a1b91a8b9ddaecf8d4773c6086"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aca341a79479eec7c69f342a64921bb04a2f4f6aeccdf32e04af3653750c6fc"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4885376cfd300624f6e58c924e596adcfa0133fd2c67fd98b5f867c0b7e70591"} {"level":"info","ts":"2026-07-23T10:02:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6884ab421bfc8954e67478503007aec6da3e384c7fce0ab31be266be48aeca5"}