--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:24:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51394","PortSpecifier":{"PortValue":51394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","object":"source:{address:{socket_address:{address:\"10.133.0.11:51394\" port_value:51394}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536697 nanos:835596590} http:{id:\"039f3e9f-c82d-4bcc-997a-1d404e5fff65\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"039f3e9f-c82d-4bcc-997a-1d404e5fff65\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":835596590,"seconds":1785536697}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51394},"address":"10.133.0.11:51394"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":835596590,"seconds":1785536697},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:51394","port":51394}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/auth-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039f3e9f-c82d-4bcc-997a-1d404e5fff65","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44228","PortSpecifier":{"PortValue":44228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"253707ba-3b18-4817-94c6-bd17edd9529b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","object":"source:{address:{socket_address:{address:\"10.133.0.11:44228\" port_value:44228}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536697 nanos:881258510} http:{id:\"253707ba-3b18-4817-94c6-bd17edd9529b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"253707ba-3b18-4817-94c6-bd17edd9529b\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"253707ba-3b18-4817-94c6-bd17edd9529b"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"253707ba-3b18-4817-94c6-bd17edd9529b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":881258510,"seconds":1785536697}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44228},"address":"10.133.0.11:44228"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"253707ba-3b18-4817-94c6-bd17edd9529b"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"253707ba-3b18-4817-94c6-bd17edd9529b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":881258510,"seconds":1785536697},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44228","port":44228}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/auth-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"253707ba-3b18-4817-94c6-bd17edd9529b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44230","PortSpecifier":{"PortValue":44230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","method":"GET","path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","object":"source:{address:{socket_address:{address:\"10.133.0.11:44230\" port_value:44230}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536697 nanos:930897121} http:{id:\"707ecf8c-5016-4b77-bc13-8481449b2f9a\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"707ecf8c-5016-4b77-bc13-8481449b2f9a\"} path:\"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"707ecf8c-5016-4b77-bc13-8481449b2f9a"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","method":"GET","path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":930897121,"seconds":1785536697}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44230},"address":"10.133.0.11:44230"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"707ecf8c-5016-4b77-bc13-8481449b2f9a"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","method":"GET","path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":930897121,"seconds":1785536697},"url_path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44230","port":44230}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/auth-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707ecf8c-5016-4b77-bc13-8481449b2f9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51406","PortSpecifier":{"PortValue":51406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"303c8854-3f7c-451c-92a7-759b2e94f403","method":"GET","path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","object":"source:{address:{socket_address:{address:\"10.133.0.11:51406\" port_value:51406}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536697 nanos:970861067} http:{id:\"303c8854-3f7c-451c-92a7-759b2e94f403\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"303c8854-3f7c-451c-92a7-759b2e94f403\"} path:\"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"303c8854-3f7c-451c-92a7-759b2e94f403"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"303c8854-3f7c-451c-92a7-759b2e94f403","method":"GET","path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":970861067,"seconds":1785536697}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51406},"address":"10.133.0.11:51406"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"303c8854-3f7c-451c-92a7-759b2e94f403"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"303c8854-3f7c-451c-92a7-759b2e94f403","method":"GET","path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":970861067,"seconds":1785536697},"url_path":"/maas-api/v1/api-keys/2f2f8596-a493-451b-90e8-695b45312631","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:51406","port":51406}}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/auth-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"303c8854-3f7c-451c-92a7-759b2e94f403","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"error","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925"} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925"} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925"} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d"} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:25:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:25:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d"} {"level":"info","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53788","PortSpecifier":{"PortValue":53788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","object":"source:{address:{socket_address:{address:\"10.133.0.11:53788\" port_value:53788}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536724 nanos:377282405} http:{id:\"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":377282405,"seconds":1785536724}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53788},"address":"10.133.0.11:53788"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":377282405,"seconds":1785536724},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53788","port":53788}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/auth-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca5480c-9a6d-4163-aa8d-2662cfe6b4fc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44710","PortSpecifier":{"PortValue":44710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","object":"source:{address:{socket_address:{address:\"10.133.0.11:44710\" port_value:44710}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536724 nanos:417985233} http:{id:\"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":417985233,"seconds":1785536724}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44710},"address":"10.133.0.11:44710"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":417985233,"seconds":1785536724},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44710","port":44710}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/auth-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d1d5138-9c13-4dc1-82e3-7e7b9e647b0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53798","PortSpecifier":{"PortValue":53798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","object":"source:{address:{socket_address:{address:\"10.133.0.11:53798\" port_value:53798}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536724 nanos:461092218} http:{id:\"9e16a46d-aa17-4fb5-ae24-9d804c503931\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9e16a46d-aa17-4fb5-ae24-9d804c503931\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-D8K3VF5YxmWaqY4u_eV84wZTtctOJ0NaJpOojeEyCpsIrInOt4fvThNGKV2C"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9789f755-4e29-4b70-93d7-38fac71f4f32","keyName":"e2e-auth-iso-a-5b1485","subscription":"e2e-auth-iso-542bde","tenant":"e2e-shared-a-ee9929","userId":"9789f755-4e29-4b70-93d7-38fac71f4f32","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9e16a46d-aa17-4fb5-ae24-9d804c503931"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":461092218,"seconds":1785536724}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53798},"address":"10.133.0.11:53798"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9e16a46d-aa17-4fb5-ae24-9d804c503931"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":461092218,"seconds":1785536724},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53798","port":53798}}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/auth-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-542bde"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:25:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e16a46d-aa17-4fb5-ae24-9d804c503931","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b24d3b862f5d664714c98f79bad8bce04878aa8a685930cb6a49e41b7216c3ed"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f28598ffc3174913a9df5fd24324d22ca68cf51bd148a5851ed9bb8753f14dc"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f3499a79c2fee1d614e8c5e680018443a7fc6f48dcbed341a84a3effb513d2"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/748fab1ce0b1f1181571a3eb3c01555bde6f0ae344a60d4bead4949117401925"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7de6c1a42af6cd28042770f4826b0bbb15df0a13a064f99dec8b87759583cc6e"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad7727c60def366b3fa7861fc17b2bf3f3483b75cd6cd7e47062baf8dca0bcde"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af427a075b33c5967a08cf309b73eb706a986d8856fef909aa6581dc82a640f"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98aefb1835d7edb57e25156004d39dbb78416d84a58b9b9365b462d043135fb4"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d7f2de603d567dd648d041bc8a97f04680f56630486a241077f8d785a51917d"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bad60b32c6bc0bcb0c4599a74fc6819caf2059e758eec7aa7123e638e3ad125"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b6afe925dd1d13a698a2d90119a895d2807c3457be0a3deebcfe67e7a40bfcc"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/627f40942c7ab7b3580a54d8e03028e8df86ae449360856a69b866fe9cb8c364"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c314230bae5d6f912a73ab55420c63384ca8fa4833efddc905109c6b8bcb7dc"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b8b4f64570a1bf3cb564110fefc95abb6af4dc588c76eff8e79b5297f7abd5d"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c87854ae31e9ae9466ee36259e6a63916becd959f0988176162925e8d27c909c"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:25:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4ddbcb9b95c9f98b7efc23ad768e53376016197398cad7ff195084356d14c6a"} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef"} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"} {"level":"error","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"} {"level":"error","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"} {"level":"error","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"error","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:26:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"error","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:26:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38588","PortSpecifier":{"PortValue":38588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e76e43f-6160-4c5f-b401-46a25920c776","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","object":"source:{address:{socket_address:{address:\"10.133.0.11:38588\" port_value:38588}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536822 nanos:175726552} http:{id:\"4e76e43f-6160-4c5f-b401-46a25920c776\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4e76e43f-6160-4c5f-b401-46a25920c776\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4e76e43f-6160-4c5f-b401-46a25920c776"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"4e76e43f-6160-4c5f-b401-46a25920c776","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":175726552,"seconds":1785536822}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38588},"address":"10.133.0.11:38588"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4e76e43f-6160-4c5f-b401-46a25920c776"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"4e76e43f-6160-4c5f-b401-46a25920c776","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":175726552,"seconds":1785536822},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:38588","port":38588}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/sub-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e76e43f-6160-4c5f-b401-46a25920c776","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48202","PortSpecifier":{"PortValue":48202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","object":"source:{address:{socket_address:{address:\"10.133.0.11:48202\" port_value:48202}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536822 nanos:226766171} http:{id:\"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":226766171,"seconds":1785536822}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48202},"address":"10.133.0.11:48202"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":226766171,"seconds":1785536822},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:48202","port":48202}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/sub-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e348aa4-6fe4-4cad-83a7-54dcb85c2c30","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:38604","PortSpecifier":{"PortValue":38604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83914198-c2b5-4a3d-897e-384a5880fa9b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","object":"source:{address:{socket_address:{address:\"10.133.0.11:38604\" port_value:38604}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536822 nanos:279166073} http:{id:\"83914198-c2b5-4a3d-897e-384a5880fa9b\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"83914198-c2b5-4a3d-897e-384a5880fa9b\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UtaUtyqs6QJr91es_eXRIB5HqXoeoIWYEInu1bbAx2DsnakdygWuWYUmf5LD"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7789edbb-2619-4cc8-8fc3-07fb6c20fbf4","keyName":"e2e-sub-iso-1e1812","subscription":"e2e-a-only-5c044f","tenant":"e2e-shared-a-ee9929","userId":"7789edbb-2619-4cc8-8fc3-07fb6c20fbf4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"83914198-c2b5-4a3d-897e-384a5880fa9b"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"83914198-c2b5-4a3d-897e-384a5880fa9b","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":279166073,"seconds":1785536822}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38604},"address":"10.133.0.11:38604"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"83914198-c2b5-4a3d-897e-384a5880fa9b"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"83914198-c2b5-4a3d-897e-384a5880fa9b","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":279166073,"seconds":1785536822},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:38604","port":38604}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/sub-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-5c044f"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83914198-c2b5-4a3d-897e-384a5880fa9b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:48214","PortSpecifier":{"PortValue":48214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cafb485-1204-46c8-9578-f446bfd99f10","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","object":"source:{address:{socket_address:{address:\"10.133.0.11:48214\" port_value:48214}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536822 nanos:327762874} http:{id:\"5cafb485-1204-46c8-9578-f446bfd99f10\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5cafb485-1204-46c8-9578-f446bfd99f10\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H7sTUGUnAzXjW6ml_NNvsKuN4DoEfZALu6jHYtAFT8Z2IgFH6qJjK50EkIq7"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d9ac1a66-dd02-4e8b-a591-0f18b2b5e7b3","keyName":"e2e-sub-iso-8a7af0","subscription":"e2e-b-only-5c044f","tenant":"e2e-shared-b-21e950","userId":"d9ac1a66-dd02-4e8b-a591-0f18b2b5e7b3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5cafb485-1204-46c8-9578-f446bfd99f10"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"5cafb485-1204-46c8-9578-f446bfd99f10","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":327762874,"seconds":1785536822}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48214},"address":"10.133.0.11:48214"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5cafb485-1204-46c8-9578-f446bfd99f10"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"5cafb485-1204-46c8-9578-f446bfd99f10","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":327762874,"seconds":1785536822},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:48214","port":48214}}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/sub-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-5c044f"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cafb485-1204-46c8-9578-f446bfd99f10","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:27:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:27:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:27:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"error","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:27:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:27:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49844","PortSpecifier":{"PortValue":49844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","object":"source:{address:{socket_address:{address:\"10.133.0.11:49844\" port_value:49844}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536848 nanos:23438726} http:{id:\"8519bf01-4b73-4577-9c53-88e3ccd3710f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8519bf01-4b73-4577-9c53-88e3ccd3710f\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8519bf01-4b73-4577-9c53-88e3ccd3710f"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":23438726,"seconds":1785536848}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49844},"address":"10.133.0.11:49844"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8519bf01-4b73-4577-9c53-88e3ccd3710f"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":23438726,"seconds":1785536848},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:49844","port":49844}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/sub-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8519bf01-4b73-4577-9c53-88e3ccd3710f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46658","PortSpecifier":{"PortValue":46658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","object":"source:{address:{socket_address:{address:\"10.133.0.11:46658\" port_value:46658}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536848 nanos:70395742} http:{id:\"dadc0dca-fe2d-4264-970b-8fdbaea58d48\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"dadc0dca-fe2d-4264-970b-8fdbaea58d48\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":70395742,"seconds":1785536848}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46658},"address":"10.133.0.11:46658"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":70395742,"seconds":1785536848},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:46658","port":46658}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/sub-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dadc0dca-fe2d-4264-970b-8fdbaea58d48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:49852","PortSpecifier":{"PortValue":49852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10361131-0d9c-4426-bfd0-d7014f5ed725","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","object":"source:{address:{socket_address:{address:\"10.133.0.11:49852\" port_value:49852}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536848 nanos:117566556} http:{id:\"10361131-0d9c-4426-bfd0-d7014f5ed725\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"10361131-0d9c-4426-bfd0-d7014f5ed725\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KwnPrqjtxle5VTAb_iFMPMh0EtKrNs9XA5cJgTCP4M8Roel5y1S4rK88XHPA"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"06209c50-c688-4f8b-80cd-e37d1172f670","keyName":"e2e-sub-iso-9f40f3","subscription":"e2e-shared-sub-0ce243","tenant":"e2e-shared-a-ee9929","userId":"06209c50-c688-4f8b-80cd-e37d1172f670","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"10361131-0d9c-4426-bfd0-d7014f5ed725"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"10361131-0d9c-4426-bfd0-d7014f5ed725","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":117566556,"seconds":1785536848}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49852},"address":"10.133.0.11:49852"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"10361131-0d9c-4426-bfd0-d7014f5ed725"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"10361131-0d9c-4426-bfd0-d7014f5ed725","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":117566556,"seconds":1785536848},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:49852","port":49852}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/sub-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0ce243"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10361131-0d9c-4426-bfd0-d7014f5ed725","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e828574-cc04-4dc2-956a-12b1e5b70765","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","object":"source:{address:{socket_address:{address:\"10.133.0.11:46666\" port_value:46666}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536848 nanos:152606879} http:{id:\"4e828574-cc04-4dc2-956a-12b1e5b70765\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4e828574-cc04-4dc2-956a-12b1e5b70765\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YYkENMIc5jYRnBJl_eaqa0utcFBQgRPCoDG1KmOC1cv4jDuqlDlZRxkJvDjm"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee0f4f24-df62-4f06-b6c6-d994f7fd2028","keyName":"e2e-sub-iso-fef7a2","subscription":"e2e-shared-sub-0ce243","tenant":"e2e-shared-b-21e950","userId":"ee0f4f24-df62-4f06-b6c6-d994f7fd2028","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4e828574-cc04-4dc2-956a-12b1e5b70765"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"4e828574-cc04-4dc2-956a-12b1e5b70765","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":152606879,"seconds":1785536848}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46666},"address":"10.133.0.11:46666"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4e828574-cc04-4dc2-956a-12b1e5b70765"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"4e828574-cc04-4dc2-956a-12b1e5b70765","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":152606879,"seconds":1785536848},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:46666","port":46666}}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/sub-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0ce243"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e828574-cc04-4dc2-956a-12b1e5b70765","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9263eed3f0fafa09eb36870b2acbcfcc056abe8d45e36ca3d65d6c85381a8d74"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91d4460d5e4a6df18c28c514bd5c85e1ca9a4f8e7f77fc2fefc8a7e03b0deb89"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3e8ab54b46114968e547b0f0e505775f8f6d5ca7e0ac3fd553d934d5ae8145"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7eb5e07f45e8e56fb2adb248d80bfe051cadc3f314686e19b7dd43759c93ef"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/409506059290a8e3bc6df44f0149c29d3ac52bc619920a3f7b6fe6424914a1b9"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef7a302e778aaaa7a07f30b832184c97a5132fbd6005082093c0a040cc928b9f"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:27:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fae98eb22812194782e685f64e5c312663d88db60ad2f321951113da3eb2db6"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba15c460da41b6a6da04bfb57bbd35d1488c9fe7de153a338711f640caeb8c58"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db2f706c01c47906d005b895851734034b41250d35b49368279b01c2201cfc36"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2f4f1552a5db44e8a2e09fd2c9044dfb9b47853801907c79ca82de7dee703b5"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c650a5475793d564ef5fcefceac05f13ddb65d56d0db3ebeb2696bb173aa7ea"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/177a4f58a8a38e7d0c1640056b676473a24039b2236472f98ea3aff6a81306ad"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe26c61593403c409a8dd12e0600088b34489eb3d4eb10b19c911970ab321adf"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eacc15e178334e66f5cc242747adb4f2b19fdd4ed696c049016e4ff780899cde"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a697e8ec91ae792aed0172205dbf7986d977a6f28e818f3831b55f1cf1b03254"} {"level":"info","ts":"2026-07-31T22:27:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b42af0bf3f48fff6da199723b71e6b0da1ae2dc375897c577142ff25300e5782"} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"} {"level":"info","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27"} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"} {"level":"debug","ts":"2026-07-31T22:28:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"debug","ts":"2026-07-31T22:28:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"error","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:28:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:28:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5494fac-b1df-42c8-816e-45807bd19fc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","object":"source:{address:{socket_address:{address:\"10.133.0.11:53334\" port_value:53334}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536940 nanos:545397741} http:{id:\"e5494fac-b1df-42c8-816e-45807bd19fc0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e5494fac-b1df-42c8-816e-45807bd19fc0\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e5494fac-b1df-42c8-816e-45807bd19fc0"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"e5494fac-b1df-42c8-816e-45807bd19fc0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":545397741,"seconds":1785536940}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53334},"address":"10.133.0.11:53334"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e5494fac-b1df-42c8-816e-45807bd19fc0"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"e5494fac-b1df-42c8-816e-45807bd19fc0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":545397741,"seconds":1785536940},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53334","port":53334}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5494fac-b1df-42c8-816e-45807bd19fc0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:33670","PortSpecifier":{"PortValue":33670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","object":"source:{address:{socket_address:{address:\"10.133.0.11:33670\" port_value:33670}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536940 nanos:602691786} http:{id:\"2e336316-bdc0-4fce-b49a-0fe1c5b3603f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2e336316-bdc0-4fce-b49a-0fe1c5b3603f\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":602691786,"seconds":1785536940}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33670},"address":"10.133.0.11:33670"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":602691786,"seconds":1785536940},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:33670","port":33670}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e336316-bdc0-4fce-b49a-0fe1c5b3603f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24892bc0-6502-45af-b478-7f234468d17b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24892bc0-6502-45af-b478-7f234468d17b","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24892bc0-6502-45af-b478-7f234468d17b","object":"source:{address:{socket_address:{address:\"10.133.0.11:53346\" port_value:53346}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536940 nanos:664796965} http:{id:\"24892bc0-6502-45af-b478-7f234468d17b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"24892bc0-6502-45af-b478-7f234468d17b\"} path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yHwOrQ04KKH5XXzA_vntTagJ2nBERbQERKjV795AZL84pdVkJ7vVy3wrHvhT"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","keyName":"e2e-rate-a-c6bfc5","subscription":"e2e-rate-iso-a-c6bfc5","tenant":"e2e-shared-a-ee9929","userId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6bfc5","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24892bc0-6502-45af-b478-7f234468d17b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"24892bc0-6502-45af-b478-7f234468d17b"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"24892bc0-6502-45af-b478-7f234468d17b","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":664796965,"seconds":1785536940}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53346},"address":"10.133.0.11:53346"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"24892bc0-6502-45af-b478-7f234468d17b"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"24892bc0-6502-45af-b478-7f234468d17b","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":664796965,"seconds":1785536940},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53346","port":53346}}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c6bfc5"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24892bc0-6502-45af-b478-7f234468d17b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","keyName":"e2e-rate-a-c6bfc5","selected_subscription":"e2e-rate-iso-a-c6bfc5","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-c6bfc5@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6bfc5","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24892bc0-6502-45af-b478-7f234468d17b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24892bc0-6502-45af-b478-7f234468d17b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53360","PortSpecifier":{"PortValue":53360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","object":"source:{address:{socket_address:{address:\"10.133.0.11:53360\" port_value:53360}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536941 nanos:769861795} http:{id:\"fb1a5f63-9769-4852-a2a8-4f113b097d6c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"fb1a5f63-9769-4852-a2a8-4f113b097d6c\"} path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yHwOrQ04KKH5XXzA_vntTagJ2nBERbQERKjV795AZL84pdVkJ7vVy3wrHvhT"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","keyName":"e2e-rate-a-c6bfc5","subscription":"e2e-rate-iso-a-c6bfc5","tenant":"e2e-shared-a-ee9929","userId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6bfc5","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":769861795,"seconds":1785536941}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53360},"address":"10.133.0.11:53360"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":769861795,"seconds":1785536941},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53360","port":53360}}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c6bfc5"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","keyName":"e2e-rate-a-c6bfc5","selected_subscription":"e2e-rate-iso-a-c6bfc5","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-c6bfc5@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6bfc5","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb1a5f63-9769-4852-a2a8-4f113b097d6c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:53362","PortSpecifier":{"PortValue":53362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","object":"source:{address:{socket_address:{address:\"10.133.0.11:53362\" port_value:53362}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536942 nanos:820509513} http:{id:\"e914d4aa-ad38-4109-bc7c-e384b8a62094\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"e914d4aa-ad38-4109-bc7c-e384b8a62094\"} path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yHwOrQ04KKH5XXzA_vntTagJ2nBERbQERKjV795AZL84pdVkJ7vVy3wrHvhT"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","keyName":"e2e-rate-a-c6bfc5","subscription":"e2e-rate-iso-a-c6bfc5","tenant":"e2e-shared-a-ee9929","userId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6bfc5","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e914d4aa-ad38-4109-bc7c-e384b8a62094"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":820509513,"seconds":1785536942}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53362},"address":"10.133.0.11:53362"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e914d4aa-ad38-4109-bc7c-e384b8a62094"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":820509513,"seconds":1785536942},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:53362","port":53362}}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c6bfc5"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"479fc38f-91d4-4217-8f0d-acd95a7a48b4","keyName":"e2e-rate-a-c6bfc5","selected_subscription":"e2e-rate-iso-a-c6bfc5","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-c6bfc5@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c6bfc5","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e914d4aa-ad38-4109-bc7c-e384b8a62094","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:29:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"debug","ts":"2026-07-31T22:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"error","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:29:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:29:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0884661f-64d5-4355-924e-45991a7733b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44742","PortSpecifier":{"PortValue":44742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0884661f-64d5-4355-924e-45991a7733b0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0884661f-64d5-4355-924e-45991a7733b0","object":"source:{address:{socket_address:{address:\"10.133.0.11:44742\" port_value:44742}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536965 nanos:61398862} http:{id:\"0884661f-64d5-4355-924e-45991a7733b0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0884661f-64d5-4355-924e-45991a7733b0\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0884661f-64d5-4355-924e-45991a7733b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0884661f-64d5-4355-924e-45991a7733b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.72:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0884661f-64d5-4355-924e-45991a7733b0"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"0884661f-64d5-4355-924e-45991a7733b0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":61398862,"seconds":1785536965}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44742},"address":"10.133.0.11:44742"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0884661f-64d5-4355-924e-45991a7733b0"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"0884661f-64d5-4355-924e-45991a7733b0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":61398862,"seconds":1785536965},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44742","port":44742}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0884661f-64d5-4355-924e-45991a7733b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0884661f-64d5-4355-924e-45991a7733b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0884661f-64d5-4355-924e-45991a7733b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34100","PortSpecifier":{"PortValue":34100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"274b926b-b4ac-44f0-b824-c9126cab182b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","object":"source:{address:{socket_address:{address:\"10.133.0.11:34100\" port_value:34100}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536965 nanos:107882316} http:{id:\"274b926b-b4ac-44f0-b824-c9126cab182b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"274b926b-b4ac-44f0-b824-c9126cab182b\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"274b926b-b4ac-44f0-b824-c9126cab182b"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"274b926b-b4ac-44f0-b824-c9126cab182b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":107882316,"seconds":1785536965}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34100},"address":"10.133.0.11:34100"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"274b926b-b4ac-44f0-b824-c9126cab182b"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"274b926b-b4ac-44f0-b824-c9126cab182b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":107882316,"seconds":1785536965},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:34100","port":34100}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"274b926b-b4ac-44f0-b824-c9126cab182b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44756","PortSpecifier":{"PortValue":44756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","object":"source:{address:{socket_address:{address:\"10.133.0.11:44756\" port_value:44756}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536965 nanos:151689830} http:{id:\"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2\"} path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1akksyMHlqRprkx9t_xjXnvc7hMzVhJCte1kCEmLGCOfjsyougI6fKiwhGfdV"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","subscription":"e2e-rate-iso-a-ad07ab","tenant":"e2e-shared-a-ee9929","userId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":151689830,"seconds":1785536965}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44756},"address":"10.133.0.11:44756"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":151689830,"seconds":1785536965},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44756","port":44756}}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad07ab"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","selected_subscription":"e2e-rate-iso-a-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-ad07ab@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"384bc118-4a6e-44e6-bbc1-2ba7c3f971f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44772","PortSpecifier":{"PortValue":44772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","object":"source:{address:{socket_address:{address:\"10.133.0.11:44772\" port_value:44772}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536966 nanos:192049837} http:{id:\"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d\"} path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1akksyMHlqRprkx9t_xjXnvc7hMzVhJCte1kCEmLGCOfjsyougI6fKiwhGfdV"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","subscription":"e2e-rate-iso-a-ad07ab","tenant":"e2e-shared-a-ee9929","userId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":192049837,"seconds":1785536966}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44772},"address":"10.133.0.11:44772"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":192049837,"seconds":1785536966},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44772","port":44772}}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad07ab"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","selected_subscription":"e2e-rate-iso-a-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-ad07ab@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3bab1e2-9742-446e-a5c6-cd06f3f7eb4d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:44778","PortSpecifier":{"PortValue":44778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.72:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19d331bf-047b-4d71-afec-fd0db8723613","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","object":"source:{address:{socket_address:{address:\"10.133.0.11:44778\" port_value:44778}}} destination:{address:{socket_address:{address:\"10.132.0.72:443\" port_value:443}}} request:{time:{seconds:1785536967 nanos:233783168} http:{id:\"19d331bf-047b-4d71-afec-fd0db8723613\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"19d331bf-047b-4d71-afec-fd0db8723613\"} path:\"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions\" host:\"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1akksyMHlqRprkx9t_xjXnvc7hMzVhJCte1kCEmLGCOfjsyougI6fKiwhGfdV"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","subscription":"e2e-rate-iso-a-ad07ab","tenant":"e2e-shared-a-ee9929","userId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-ee9929.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19d331bf-047b-4d71-afec-fd0db8723613","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdC02Yzc3Y2RkZDQ4LXhxcWo3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWVlOTkyOS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1lZTk5Mjktb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"19d331bf-047b-4d71-afec-fd0db8723613"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"19d331bf-047b-4d71-afec-fd0db8723613","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":233783168,"seconds":1785536967}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44778},"address":"10.133.0.11:44778"}}}}},"destination":{"address":"10.132.0.72:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"},"headers":{":authority":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-ee9929-kserve-workload-svc.ai-tenant-e2e-shared-a-ee9929.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.72~e2e-shared-a-ee9929-openshift-default-6c77cddd48-xqqj7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"19d331bf-047b-4d71-afec-fd0db8723613"},"host":"e2e-shared-a-ee9929.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"19d331bf-047b-4d71-afec-fd0db8723613","method":"POST","path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":233783168,"seconds":1785536967},"url_path":"/ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:44778","port":44778}}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad07ab"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19d331bf-047b-4d71-afec-fd0db8723613","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cc4cad29-0445-40b4-b6fe-a60b927d9cdb","keyName":"e2e-rate-a-ad07ab","selected_subscription":"e2e-rate-iso-a-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-a-ee9929/e2e-rate-iso-a-ad07ab@ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-ee9929/models/facebook/opt-125m","name":"rate-test-model-ee9929","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad07ab","namespace":"ai-tenant-e2e-shared-a-ee9929","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-ee9929/rate-test-model-ee9929"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d331bf-047b-4d71-afec-fd0db8723613","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19d331bf-047b-4d71-afec-fd0db8723613","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:34116","PortSpecifier":{"PortValue":34116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","method":"POST","path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","object":"source:{address:{socket_address:{address:\"10.133.0.11:34116\" port_value:34116}}} destination:{address:{socket_address:{address:\"10.132.0.75:443\" port_value:443}}} request:{time:{seconds:1785536967 nanos:274563391} http:{id:\"56634e8d-9cda-4bb6-a1da-2bc167919a9d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-21e950-kserve-workload-svc.ai-tenant-e2e-shared-b-21e950.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"56634e8d-9cda-4bb6-a1da-2bc167919a9d\"} path:\"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions\" host:\"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1S7m3GbpuiTR8v8K8_FINwMUrNVS8GWMPZC19bX6SlHvBFhCDPibAmYgkJvuv"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9a28bd5d-2e02-46d5-a745-f1159f32ebbc","keyName":"e2e-rate-b-ad07ab","subscription":"e2e-rate-iso-b-ad07ab","tenant":"e2e-shared-b-21e950","userId":"9a28bd5d-2e02-46d5-a745-f1159f32ebbc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-21e950.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m","name":"rate-test-model-21e950","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ad07ab","namespace":"ai-tenant-e2e-shared-b-21e950","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950"}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-21e950-kserve-workload-svc.ai-tenant-e2e-shared-b-21e950.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0yMWU5NTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdC1kOGQ0ZmQ4NWItZmh3YjgKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWItMjFlOTUwLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1iLTIxZTk1MC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","method":"POST","path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":274563391,"seconds":1785536967}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":34116},"address":"10.133.0.11:34116"}}}}},"destination":{"address":"10.132.0.75:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"},"headers":{":authority":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-21e950-kserve-workload-svc.ai-tenant-e2e-shared-b-21e950.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.75~e2e-shared-b-21e950-openshift-default-d8d4fd85b-fhwb8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d"},"host":"e2e-shared-b-21e950.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","method":"POST","path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":274563391,"seconds":1785536967},"url_path":"/ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:34116","port":34116}}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ad07ab"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9a28bd5d-2e02-46d5-a745-f1159f32ebbc","keyName":"e2e-rate-b-ad07ab","selected_subscription":"e2e-rate-iso-b-ad07ab","selected_subscription_key":"ai-tenant-e2e-shared-b-21e950/e2e-rate-iso-b-ad07ab@ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-21e950/models/facebook/opt-125m","name":"rate-test-model-21e950","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ad07ab","namespace":"ai-tenant-e2e-shared-b-21e950","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-21e950/rate-test-model-21e950"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:29:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56634e8d-9cda-4bb6-a1da-2bc167919a9d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/782cb7d924068097ff5cdce8165da32f9536acb4e38c957936a405e0141c4113"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3703575341d3d447192911b325676f89a25ed0c52f944c2a77c0c829bc04d0d1"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/422ec339487a2e04cc7624f558304aa1ee65e2c90f337da654c4411f21dcffc3"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d592165f69b8540bea3fdef3fb1646a0eec8e62deaa00f2e925a4a5803a2a1dd"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9d9fe2404a94c762a63899bdfd55cc492e68b9ce238e9d3d40ffd670424a1f"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa07bb04f58096b79a7d702efb07ff7cf89753167a1b85703110469295e9b4a8"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/229f7ce1430d0e169e0d2b95129da14dd400f7350e50c5a63be929b20b55dd27"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bac982d4aac8ca0c384bef991c61af7a2822aa25f532686b444ec123e0e1f5d"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e539108af01d5a5869b29e3e64739de6c58d9ab99a9e48b505cc37e931ad9e5"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8d554085fc840d67cb69089af4583fea3e4f15d96c92d03e6a219ee693849b5"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c3c98772204309bfd7b6358235d3f76b8adce0d0df491ab3faaaa0a0c397362"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87eea306bf5ce69d0e111eb6d15f4b160f5dd6c9c4c477edd08074ccbb579842"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdb97c9d186a922c97720a15e8bd683343453c9503fd622ba11cdac4ad92e039"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a90f050e9a5da9c3f43cd60c88b65a708a11b0978fcdddb3874a0b082ef3244"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a77039bac3a789a2022e7f84e24fe919194042f92452a0a94578a049f7c15e09"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43c847f14c102c573e0587104e5b7d4cab7ad8b3325cfc4fd27e4d60b30de6e5"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/956c338f86aedc4c57a8a1ff23dcb66f40e2c81adfcce816b95f5e335103f8d0"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/976fd9c31809230fcbaf786ba8a7010dc69b3117e9b4f063130873dd285debde"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dfd85155544089ec9e4107e75f55151021f9f6fac5227a971874d03f185a9d1"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7af5ddd241e303ef37a7196a23a3f79d91f7b0c3f71b431064903cdff45d761"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f40376587132e8a75069d1bdb58fdeec5b8092a3b99d3c58229ecdfbf3d798e"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58d3782254c983bbf5a6532507a6b88511b6efb10ad06e3c7b5811319a7491c5"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f6253ad028d4910eba020b414216aaeee705407f789dd9b6a625adcc64ac22"} {"level":"info","ts":"2026-07-31T22:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff8e8cfa87e591edc8b81bfaefea2c233cfd40894e655824bfe0af44fe5e41e5"} {"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55140","PortSpecifier":{"PortValue":55140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","object":"source:{address:{socket_address:{address:\"10.133.0.11:55140\" port_value:55140}}} destination:{address:{socket_address:{address:\"10.133.0.49:443\" port_value:443}}} request:{time:{seconds:1785537050 nanos:219778897} http:{id:\"3f06ae46-120b-4b16-a5d8-76915e2d4355\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"3f06ae46-120b-4b16-a5d8-76915e2d4355\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LXFwbDY2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3f06ae46-120b-4b16-a5d8-76915e2d4355"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":219778897,"seconds":1785537050}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55140},"address":"10.133.0.11:55140"}}}}},"destination":{"address":"10.133.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"3f06ae46-120b-4b16-a5d8-76915e2d4355"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":219778897,"seconds":1785537050},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55140","port":55140}}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f06ae46-120b-4b16-a5d8-76915e2d4355","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:55150","PortSpecifier":{"PortValue":55150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"007bd423-1f0a-47fa-95f0-393a53584fd4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","object":"source:{address:{socket_address:{address:\"10.133.0.11:55150\" port_value:55150}}} destination:{address:{socket_address:{address:\"10.133.0.49:443\" port_value:443}}} request:{time:{seconds:1785537050 nanos:269183953} http:{id:\"007bd423-1f0a-47fa-95f0-393a53584fd4\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"007bd423-1f0a-47fa-95f0-393a53584fd4\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FdGw5w9DRtLqIgP4_2o72xOmpP5VkylmQ9fyOcBED7okooJiP7MOkpGzs0RG"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c49d2c80-520d-485a-a0b7-d3202189ffdc","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c49d2c80-520d-485a-a0b7-d3202189ffdc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"007bd423-1f0a-47fa-95f0-393a53584fd4"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"007bd423-1f0a-47fa-95f0-393a53584fd4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":269183953,"seconds":1785537050}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55150},"address":"10.133.0.11:55150"}}}}},"destination":{"address":"10.133.0.49:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LXFwbDY2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.49~maas-default-gateway-openshift-default-5ccb968c66-qpl66.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"007bd423-1f0a-47fa-95f0-393a53584fd4"},"host":"maas.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"007bd423-1f0a-47fa-95f0-393a53584fd4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":269183953,"seconds":1785537050},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:55150","port":55150}}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c49d2c80-520d-485a-a0b7-d3202189ffdc","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"007bd423-1f0a-47fa-95f0-393a53584fd4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-31T22:31:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"} {"level":"info","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"} {"level":"error","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-31T22:31:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50180","PortSpecifier":{"PortValue":50180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","object":"source:{address:{socket_address:{address:\"10.133.0.11:50180\" port_value:50180}}} destination:{address:{socket_address:{address:\"10.132.0.80:443\" port_value:443}}} request:{time:{seconds:1785537093 nanos:18536269} http:{id:\"7a653d19-0483-41ba-9951-f6b58bdc1dfb\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0wNjgzMzUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTA2ODMzNS1vcGVuc2hpZnQtZGVmYXVsdC03NTk0NTY3NTZkLXJ2c3B6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTA2ODMzNS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0wNjgzMzUtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"7a653d19-0483-41ba-9951-f6b58bdc1dfb\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/23c77ed495d1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=221609e9-9088-46d4-890d-b28acd85270a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"1533b3ad-0eeb-4a2f-90e2-3869acfe32c8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":18536269,"seconds":1785537093}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50180},"address":"10.133.0.11:50180"}}}}},"destination":{"address":"10.132.0.80:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"},"headers":{":authority":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS0wNjgzMzUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTA2ODMzNS1vcGVuc2hpZnQtZGVmYXVsdC03NTk0NTY3NTZkLXJ2c3B6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTA2ODMzNS1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS0wNjgzMzUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":18536269,"seconds":1785537093},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:50180","port":50180}}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-068335/ipp-route-068335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:31:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a653d19-0483-41ba-9951-f6b58bdc1dfb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:50192","PortSpecifier":{"PortValue":50192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","method":"POST","path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","object":"source:{address:{socket_address:{address:\"10.133.0.11:50192\" port_value:50192}}} destination:{address:{socket_address:{address:\"10.132.0.80:443\" port_value:443}}} request:{time:{seconds:1785537095 nanos:76378857} http:{id:\"96c3f5a1-d860-4b97-a957-ed7639a234bc\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-068335-kserve-workload-svc.ai-tenant-e2e-ipp-a-068335.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.133.0.11\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"52.71.36.72,10.133.0.11\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"96c3f5a1-d860-4b97-a957-ed7639a234bc\"} path:\"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions\" host:\"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MDnHJSq2GZxRWShF_ZY4qNDQTlk7Gykr9tyGz3tOrg7ATZ5h4daG2GN9AF2N"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"24a14bdd-7765-44c7-84aa-62dd43c368b2","keyName":"e2e-ipp-068335","subscription":"ipp-route-068335-sub","tenant":"e2e-ipp-a-068335","userId":"24a14bdd-7765-44c7-84aa-62dd43c368b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-068335.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m","name":"ipp-route-068335","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-068335-sub","namespace":"ai-tenant-e2e-ipp-a-068335","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-068335/ipp-route-068335"}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-068335-kserve-workload-svc.ai-tenant-e2e-ipp-a-068335.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"96c3f5a1-d860-4b97-a957-ed7639a234bc"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","method":"POST","path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":76378857,"seconds":1785537095}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":50192},"address":"10.133.0.11:50192"}}}}},"destination":{"address":"10.132.0.80:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"},"headers":{":authority":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=52.71.36.72;host=e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-068335-kserve-workload-svc.ai-tenant-e2e-ipp-a-068335.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.80~e2e-ipp-a-068335-openshift-default-759456756d-rvspz.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"52.71.36.72,10.133.0.11","x-forwarded-host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"96c3f5a1-d860-4b97-a957-ed7639a234bc"},"host":"e2e-ipp-a-068335.apps.be6dc42c-b657-4e46-9c7c-23c77ed495d1.prod.konfluxeaas.com","id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","method":"POST","path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":76378857,"seconds":1785537095},"url_path":"/ai-tenant-e2e-ipp-a-068335/ipp-route-068335/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.133.0.11:50192","port":50192}}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-068335/ipp-route-068335\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-068335-sub"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"24a14bdd-7765-44c7-84aa-62dd43c368b2","keyName":"e2e-ipp-068335","selected_subscription":"ipp-route-068335-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-068335/ipp-route-068335-sub@ai-tenant-e2e-ipp-a-068335/ipp-route-068335","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-068335/models/facebook/opt-125m","name":"ipp-route-068335","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-068335-sub","namespace":"ai-tenant-e2e-ipp-a-068335","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-068335/ipp-route-068335"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-31T22:31:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96c3f5a1-d860-4b97-a957-ed7639a234bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e2f07f63041c0dcb2e97bdc6eadbda268f562be33d76a392513ed23ae0abeec"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/029e3bb8d068684fafcd30829d8d00be0a2a04a43a50dbb55e81c3c7ab3fb083"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c638c18528f1d93dd2d73535048986e7e55a13dd3ce912fb18a926db2e8f625"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/297609b2759b359e6d314894a0ee6b5431b941697e81ac1e4ba0ccce87d69503"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dd8a445a8983542e0e46b57cf751ca6b74899142088d40263f0a129146042f5"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21f43858f613a401a0910f861cb41a642b020ded0beda04fd6953eafbd31962a"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52636bc297214f8e3afb9512c54163b31fb4df58415318718dcf04edd9dc6471"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0982d14813f57297d6ff3880982cfd2e9ea50c1c1898604dd87d70748c5bda3a"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab7acbdfbe0e29546bc7c12c07e19e876f6044b76855a96da57058aebb1eb7c"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c456de2fd35a5ad41771d7c61560e843a59e89eb860423a9873965e813759764"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58bcc50aac97776bda68857458dd4bd4276970f26c0cd1e31b7e08494803e14"} {"level":"info","ts":"2026-07-31T22:32:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0a69f8ad4386d841e0198fd1f57f3094e6d90a56bc0c74b9f2688c0a2c6605"}