--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb"} {"level":"error","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb"} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"} {"level":"info","ts":"2026-07-15T19:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8f2dd640bcf7d8c15529343efc6b3bb70ccc9dc7c7e183306b05554005dc325"} {"level":"info","ts":"2026-07-15T19:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/558035b8959273a4294af8d2931529c979f7da5cdf970bd05cf155818183464a"} {"level":"info","ts":"2026-07-15T19:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/261b918715b25ab8c0a994652ed9f596c152ea63fa80d2efd20913504bfec596"} {"level":"info","ts":"2026-07-15T19:30:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26c412fd8d574c13d4d1d8d7df4dd871e0bb9912a918f90e68ffd1790e987837"} {"level":"info","ts":"2026-07-15T19:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e1dffaa977b43501813879886cc9187bbecb84880904cc2f7d93a4e7e2767e0"} {"level":"info","ts":"2026-07-15T19:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fc48a1c1ca8dacd3341d3d90a6ad205b4832b40f64a4cb24ff388924431cdfb"} {"level":"info","ts":"2026-07-15T19:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/606639eab75ac85f355e6e6e5f296210ebed1e950111a7da78511770ba987b79"} {"level":"info","ts":"2026-07-15T19:31:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/012385f5983a3de947d1fdcda10d96f4bec6bd7c750d4c589baf53ac6a0862e9"} {"level":"debug","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"} {"level":"debug","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"} {"level":"debug","ts":"2026-07-15T19:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800"} {"level":"error","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800"} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800"} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"error","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201"} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"} {"level":"info","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f"} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73"} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73"} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640"} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640"} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77547740-fd4b-4618-8364-4a2343c1c489","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46518","PortSpecifier":{"PortValue":46518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77547740-fd4b-4618-8364-4a2343c1c489","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77547740-fd4b-4618-8364-4a2343c1c489","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46518","PortSpecifier":{"PortValue":46518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143958,"nanos":792728451},"http":{"id":"77547740-fd4b-4618-8364-4a2343c1c489","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77547740-fd4b-4618-8364-4a2343c1c489","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77547740-fd4b-4618-8364-4a2343c1c489","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77547740-fd4b-4618-8364-4a2343c1c489","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77547740-fd4b-4618-8364-4a2343c1c489","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77547740-fd4b-4618-8364-4a2343c1c489","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53360","PortSpecifier":{"PortValue":53360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53360","PortSpecifier":{"PortValue":53360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143958,"nanos":852050779},"http":{"id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e1db93c-294c-4909-90b2-2a6fef6ebb5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46532","PortSpecifier":{"PortValue":46532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a433420a-1321-4231-afaf-a3ea67c44e3b","method":"GET","path":"/maas-api/v1/api-keys/05677089-1c62-4966-8269-e2d43b9295a3","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46532","PortSpecifier":{"PortValue":46532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143958,"nanos":915082468},"http":{"id":"a433420a-1321-4231-afaf-a3ea67c44e3b","method":"GET","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/05677089-1c62-4966-8269-e2d43b9295a3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/05677089-1c62-4966-8269-e2d43b9295a3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a433420a-1321-4231-afaf-a3ea67c44e3b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53368","PortSpecifier":{"PortValue":53368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5d61a75-2136-41e0-a980-5a5d196c1059","method":"GET","path":"/maas-api/v1/api-keys/5e742284-d2e3-499e-9190-cd87e2ab109c","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53368","PortSpecifier":{"PortValue":53368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143958,"nanos":953544297},"http":{"id":"c5d61a75-2136-41e0-a980-5a5d196c1059","method":"GET","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5e742284-d2e3-499e-9190-cd87e2ab109c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5e742284-d2e3-499e-9190-cd87e2ab109c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5d61a75-2136-41e0-a980-5a5d196c1059","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50900","PortSpecifier":{"PortValue":50900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50900","PortSpecifier":{"PortValue":50900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143983,"nanos":491365302},"http":{"id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba0b8735-d5c9-47be-a885-0663cadaa77e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51340","PortSpecifier":{"PortValue":51340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51340","PortSpecifier":{"PortValue":51340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143983,"nanos":528445805},"http":{"id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5eef0bea-7855-4427-819f-6ddd6b2d1d57","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50906","PortSpecifier":{"PortValue":50906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50906","PortSpecifier":{"PortValue":50906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784143983,"nanos":568604270},"http":{"id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","method":"GET","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PKNlr187UBgS2wHC_SWebTs1GeokSnjLMERuhNHOFRpOh1nDrxCa9yNGSvoD"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PKNlr187UBgS2wHC_SWebTs1GeokSnjLMERuhNHOFRpOh1nDrxCa9yNGSvoD\"}"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bdcaea50-7440-4d82-a3fb-c5e51a0a6075","keyName":"e2e-auth-iso-a-b1b410","subscription":"e2e-auth-iso-e84aea","tenant":"e2e-shared-a-257300","userId":"bdcaea50-7440-4d82-a3fb-c5e51a0a6075","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e84aea"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4566a54b-b59b-4d22-bb7b-8f7d33de1347","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37904","PortSpecifier":{"PortValue":37904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37904","PortSpecifier":{"PortValue":37904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144000,"nanos":804342894},"http":{"id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d15e4ac-aa12-44ba-875a-390a0aefb2c3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32848","PortSpecifier":{"PortValue":32848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32848","PortSpecifier":{"PortValue":32848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144000,"nanos":844206062},"http":{"id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ca6654e-967e-40bb-ab1c-eb51539fc94e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32862","PortSpecifier":{"PortValue":32862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"805a7b1d-2acd-4fec-aced-17d49c39b143","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:32862","PortSpecifier":{"PortValue":32862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144000,"nanos":883549567},"http":{"id":"805a7b1d-2acd-4fec-aced-17d49c39b143","method":"GET","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NAqEBn4lsj7hFfY3_LXcy7s9vkNoAcqo66EEZyuLEC8hk5fsk0S4lTHlvH4C"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NAqEBn4lsj7hFfY3_LXcy7s9vkNoAcqo66EEZyuLEC8hk5fsk0S4lTHlvH4C\"}"} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-15T19:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"805a7b1d-2acd-4fec-aced-17d49c39b143","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4880aa52-e1b7-4418-989f-68e079c195df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52048","PortSpecifier":{"PortValue":52048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4880aa52-e1b7-4418-989f-68e079c195df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4880aa52-e1b7-4418-989f-68e079c195df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52048","PortSpecifier":{"PortValue":52048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144018,"nanos":130029404},"http":{"id":"4880aa52-e1b7-4418-989f-68e079c195df","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4880aa52-e1b7-4418-989f-68e079c195df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4880aa52-e1b7-4418-989f-68e079c195df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4880aa52-e1b7-4418-989f-68e079c195df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4880aa52-e1b7-4418-989f-68e079c195df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4880aa52-e1b7-4418-989f-68e079c195df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39242","PortSpecifier":{"PortValue":39242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39242","PortSpecifier":{"PortValue":39242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144018,"nanos":167069769},"http":{"id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61b1de9-ca0a-4544-8a50-5c98e8e94737","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52058","PortSpecifier":{"PortValue":52058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:52058","PortSpecifier":{"PortValue":52058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144018,"nanos":207257936},"http":{"id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee5d29ad-d9b1-41a0-93e1-5d07e9e24f8a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c29f6587-e80c-40b2-b614-24566ea34962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39256","PortSpecifier":{"PortValue":39256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c29f6587-e80c-40b2-b614-24566ea34962","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c29f6587-e80c-40b2-b614-24566ea34962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39256","PortSpecifier":{"PortValue":39256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144018,"nanos":244983692},"http":{"id":"c29f6587-e80c-40b2-b614-24566ea34962","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c29f6587-e80c-40b2-b614-24566ea34962","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c29f6587-e80c-40b2-b614-24566ea34962","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c29f6587-e80c-40b2-b614-24566ea34962","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c29f6587-e80c-40b2-b614-24566ea34962","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c29f6587-e80c-40b2-b614-24566ea34962","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39450","PortSpecifier":{"PortValue":39450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e826b408-46f3-4c53-9568-62d75c8e62f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39450","PortSpecifier":{"PortValue":39450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144035,"nanos":497481038},"http":{"id":"e826b408-46f3-4c53-9568-62d75c8e62f3","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e826b408-46f3-4c53-9568-62d75c8e62f3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35196","PortSpecifier":{"PortValue":35196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35196","PortSpecifier":{"PortValue":35196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144035,"nanos":533441814},"http":{"id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c30a6a61-0065-40ec-b5c5-abfffe3892aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35212","PortSpecifier":{"PortValue":35212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","method":"GET","path":"/maas-api/v1/api-keys/ca4c7ecd-28af-4cc5-a29b-bb5867dc1c02","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:35212","PortSpecifier":{"PortValue":35212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144035,"nanos":565773925},"http":{"id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","method":"GET","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca4c7ecd-28af-4cc5-a29b-bb5867dc1c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca4c7ecd-28af-4cc5-a29b-bb5867dc1c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e1c11cd-02ef-4f3f-8fe2-d26d87567658","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39454","PortSpecifier":{"PortValue":39454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b19ad408-c38a-481c-ba65-63a742cd0b18","method":"GET","path":"/maas-api/v1/api-keys/ca4c7ecd-28af-4cc5-a29b-bb5867dc1c02","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39454","PortSpecifier":{"PortValue":39454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144035,"nanos":599800270},"http":{"id":"b19ad408-c38a-481c-ba65-63a742cd0b18","method":"GET","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca4c7ecd-28af-4cc5-a29b-bb5867dc1c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ca4c7ecd-28af-4cc5-a29b-bb5867dc1c02",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:33:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b19ad408-c38a-481c-ba65-63a742cd0b18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57442","PortSpecifier":{"PortValue":57442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"086f8b3c-ac12-44f3-a6c6-c02988019086","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57442","PortSpecifier":{"PortValue":57442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144052,"nanos":814450047},"http":{"id":"086f8b3c-ac12-44f3-a6c6-c02988019086","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"086f8b3c-ac12-44f3-a6c6-c02988019086","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59178","PortSpecifier":{"PortValue":59178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59178","PortSpecifier":{"PortValue":59178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144052,"nanos":851810699},"http":{"id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/auth-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c7ce694-cc98-4404-ad60-0096f56ff5ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b9a703-b773-4ef4-89aa-114330962612","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57454","PortSpecifier":{"PortValue":57454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52b9a703-b773-4ef4-89aa-114330962612","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52b9a703-b773-4ef4-89aa-114330962612","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:57454","PortSpecifier":{"PortValue":57454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144052,"nanos":885855079},"http":{"id":"52b9a703-b773-4ef4-89aa-114330962612","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1V6zNqao9BhGmYGe2_LJLXAnRzw9mP3Yohj1m2TSwJA4fllhey9EWT7KDWkdL"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1V6zNqao9BhGmYGe2_LJLXAnRzw9mP3Yohj1m2TSwJA4fllhey9EWT7KDWkdL\"}"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6bf88761-1da4-4aa5-9976-d7a916380af0","keyName":"e2e-auth-iso-a-3d9b90","subscription":"e2e-auth-iso-62d7e6","tenant":"e2e-shared-a-257300","userId":"6bf88761-1da4-4aa5-9976-d7a916380af0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52b9a703-b773-4ef4-89aa-114330962612","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/auth-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-62d7e6"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52b9a703-b773-4ef4-89aa-114330962612","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b9a703-b773-4ef4-89aa-114330962612","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:34:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52b9a703-b773-4ef4-89aa-114330962612","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e48fbdee27eb6fce55c38821645ec7d21c65c7c2b389d65e0486f73025abfeb1"} {"level":"info","ts":"2026-07-15T19:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f643eee092487befdb9d739472d57f9c8d8891806b16b18d71d8599f08308192"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63bf3dbb87b25955bdb9562410eb0561c5df76a0a5000697c1ffea038c4883ef"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc4ba879455dfca4e7f4e678bf0de0c91ad28f5dba24d68c990492d79aa2c800"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82f07b36b1ad37e107f8e1271d1e3935c1eaa662f96e842f2f7eaccb5f6f5201"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1bfc89a7f528b9f102e83ad13bed6f73cef4e3a17d6211e072e1f5da5190a21"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1730eaee7f1aa3c19d5098b753fb491b41f47c0b322c52edf387b1da58bec5f"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e762643100b401045a6d4ce653dc2f7e2b15088ca5f61d7c74b287ae3292497"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10fb5fb4f504d6dbff7b105c36710b94eb98583780a91601242c59ea99f64640"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/897429d9c79e717e738f57bf6cef916eee03d201a2613ebb73da6a16a0360d2f"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ed422a85f274a35357daf524997b93e397b3e0ffff4bda468cb97dd31c4d96d"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c58fae37761eeb8338ecc18d1309c87e434f50ab910b9808e57171b923708038"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74bdb00126461d0adadb309eff5e446014f5b91c2e55df2096dbd4ac4efcbbe4"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8e4f9683bca3870deb5c723c3e157291ff9d470165759ddabc7d936c3b95d73"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c0d8ccd6822cec871df5538ee74945c32d201f6c74780d9a8aa1868e0f3a014"} {"level":"info","ts":"2026-07-15T19:34:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a9dae6e5b423039b2431f1d7b2ce0650309a9da33984a2034eeee509a283f9f"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:34:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"info","ts":"2026-07-15T19:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"debug","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab"} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab"} {"level":"error","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab"} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"debug","ts":"2026-07-15T19:35:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"error","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"debug","ts":"2026-07-15T19:35:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:35:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"debug","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"} {"level":"info","ts":"2026-07-15T19:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d"} {"level":"info","ts":"2026-07-15T19:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47098","PortSpecifier":{"PortValue":47098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47098","PortSpecifier":{"PortValue":47098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144131,"nanos":296466008},"http":{"id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/sub-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10ab9b53-31f0-4dbd-ae84-653014db0a84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44076","PortSpecifier":{"PortValue":44076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b32aa446-97f0-4824-af1e-fb4b9498e788","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44076","PortSpecifier":{"PortValue":44076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144131,"nanos":340464251},"http":{"id":"b32aa446-97f0-4824-af1e-fb4b9498e788","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/sub-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32aa446-97f0-4824-af1e-fb4b9498e788","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47100","PortSpecifier":{"PortValue":47100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47100","PortSpecifier":{"PortValue":47100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144131,"nanos":383099122},"http":{"id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","method":"GET","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1I1nf4XLChkNCVzB4_ArhjhcFwHD57cuJ269MR1kaDUWzCaEW2QDk6ItlUQL5"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1I1nf4XLChkNCVzB4_ArhjhcFwHD57cuJ269MR1kaDUWzCaEW2QDk6ItlUQL5\"}"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"963f4318-8f41-464c-98ad-f99b366c341b","keyName":"e2e-sub-iso-f15215","subscription":"e2e-a-only-fd20d9","tenant":"e2e-shared-a-257300","userId":"963f4318-8f41-464c-98ad-f99b366c341b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/sub-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-fd20d9"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"843a50b6-6c0b-4253-bf46-20fb83fd0920","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44086","PortSpecifier":{"PortValue":44086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ca986c5-2d69-43ca-ad55-d352a534c751","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44086","PortSpecifier":{"PortValue":44086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144131,"nanos":426547283},"http":{"id":"1ca986c5-2d69-43ca-ad55-d352a534c751","method":"GET","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xRb9NpEIt9fIwKzo_eloaYctuMgKJ6dzzkUWD3KaMbneR4BBpIN5IeQFJodl"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xRb9NpEIt9fIwKzo_eloaYctuMgKJ6dzzkUWD3KaMbneR4BBpIN5IeQFJodl\"}"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5089f4ad-8be0-4976-9202-a85b05f2e75c","keyName":"e2e-sub-iso-3683fa","subscription":"e2e-b-only-fd20d9","tenant":"e2e-shared-b-0dc297","userId":"5089f4ad-8be0-4976-9202-a85b05f2e75c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/sub-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-fd20d9"} {"level":"info","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ca986c5-2d69-43ca-ad55-d352a534c751","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45512","PortSpecifier":{"PortValue":45512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45512","PortSpecifier":{"PortValue":45512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144150,"nanos":138854627},"http":{"id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/sub-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5489450-5d4e-4ecd-97dd-34f09c3473b1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50834","PortSpecifier":{"PortValue":50834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e815e83b-43eb-43ac-9127-fddf8909394e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50834","PortSpecifier":{"PortValue":50834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144150,"nanos":175265517},"http":{"id":"e815e83b-43eb-43ac-9127-fddf8909394e","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/sub-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e815e83b-43eb-43ac-9127-fddf8909394e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45518","PortSpecifier":{"PortValue":45518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45518","PortSpecifier":{"PortValue":45518}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144150,"nanos":207185948},"http":{"id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yAXX0UfcGUVnKwot_KlMc8EMGX7iHhBfX9pVXvcikWzmK3iwLON4HE2otsIO"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yAXX0UfcGUVnKwot_KlMc8EMGX7iHhBfX9pVXvcikWzmK3iwLON4HE2otsIO\"}"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b46c94ad-78f6-47be-aaf3-93763316eb27","keyName":"e2e-sub-iso-82c447","subscription":"e2e-shared-sub-0258f3","tenant":"e2e-shared-a-257300","userId":"b46c94ad-78f6-47be-aaf3-93763316eb27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/sub-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0258f3"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74adb735-a56c-4a5e-8d8d-7ab0b99e2232","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50836","PortSpecifier":{"PortValue":50836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144150,"nanos":238506561},"http":{"id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GWP8WdznWglkbBtR_UTdypc3qUDMe2msnF847nBW1JWU5ryciz2PBLzkXKmg"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GWP8WdznWglkbBtR_UTdypc3qUDMe2msnF847nBW1JWU5ryciz2PBLzkXKmg\"}"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c2a4b8e-322d-4ab2-8776-a0df0424387c","keyName":"e2e-sub-iso-892a62","subscription":"e2e-shared-sub-0258f3","tenant":"e2e-shared-b-0dc297","userId":"2c2a4b8e-322d-4ab2-8776-a0df0424387c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/sub-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-0258f3"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:35:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71f2e35d-fd5a-48fe-a9fc-4d6b230ebe5e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:35:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5990e68d639ee819453f5c9dc0cb3aadba50c25ca9e2b5ed7b4340a8e7cf184"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b30f3da5612ba63db9afe48d77cd835a41b8d31a15ac35b722ad9097192b73b"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db6fbfe9b6973d71776a56bb2245e96f287647b4eb548fdaf293a486bb9167ab"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d893b526128faf385754af6ac8d160a626b41ee898e1a6e337dfcbf947909da"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ab37ae7ddca1aae1cc66b6ca140c7741ed1462bc2c98ac34372fdd119c7a484"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce435fd00381cf07bac5ff4fe04cf53c539907cf551df6735f0b9b20ad4f7b3c"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/646c1be5b97fa184687ddfda6b51014202c119ec7822239c7a9568e9d8316212"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06a518e17a741bdfeee472ee4978c68d5651637037ab9fa027abc979b8be3d2d"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c326de79394045b0d9c87e61ffa246ffce6bbf38b99a04b3523009187177a85f"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/accbc137bf9eeab6162458e2dd6f5f3ca46b902e67a8517b397f4c75c58b6714"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dff55a4677bebd12fae54fa9969aebec9f1dea4eba18a5c5e5caac258bb80050"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e72377c1423955a0bb2afc83a6486a09429ee6313cab864c6fe3a8fbb0acf3d"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d6432344f0cb752b058962ce0cfc0e693b896c66b94d50252a4545ea04d4e00"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c81bd370c4424e6b60d82f72ea4a88b78abf32a2beb5495a21694482578d90bd"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fbdaa961511675c41cb613e87381ff03cf90c710b155db8e60569d528aad301"} {"level":"info","ts":"2026-07-15T19:35:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25d03bc945994619584f33f1c2db04794f2484762dc042398f229b63413a29b7"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"error","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"} {"level":"info","ts":"2026-07-15T19:36:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"error","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"error","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"debug","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"debug","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"error","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a"} {"level":"error","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"debug","ts":"2026-07-15T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T19:36:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"debug","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490"} {"level":"info","ts":"2026-07-15T19:36:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"info","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43320","PortSpecifier":{"PortValue":43320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43320","PortSpecifier":{"PortValue":43320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144220,"nanos":459871755},"http":{"id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08e5b474-60c4-41c1-9f48-8905c72fa12f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58152","PortSpecifier":{"PortValue":58152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa54a7e2-d538-4347-ae45-26e26b243e86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58152","PortSpecifier":{"PortValue":58152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144220,"nanos":503670280},"http":{"id":"fa54a7e2-d538-4347-ae45-26e26b243e86","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa54a7e2-d538-4347-ae45-26e26b243e86","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","method":"POST","path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43326","PortSpecifier":{"PortValue":43326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144220,"nanos":545183933},"http":{"id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bCezImherHPmqk1C_Oav3plp176g0e6ihpQVpD2jyabQrYf3xxvZokXLG7gT"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bCezImherHPmqk1C_Oav3plp176g0e6ihpQVpD2jyabQrYf3xxvZokXLG7gT\"}"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","keyName":"e2e-rate-a-1c5c6e","subscription":"e2e-rate-iso-a-1c5c6e","tenant":"e2e-shared-a-257300","userId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\",\"requestedSubscription\":\"e2e-rate-iso-a-1c5c6e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1c5c6e","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1c5c6e"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","keyName":"e2e-rate-a-1c5c6e","selected_subscription":"e2e-rate-iso-a-1c5c6e","selected_subscription_key":"ai-tenant-e2e-shared-a-257300/e2e-rate-iso-a-1c5c6e@ai-tenant-e2e-shared-a-257300/rate-test-model-257300","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1c5c6e","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b577ae03-9dcb-4b82-a87f-12679fef2ae4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43332","PortSpecifier":{"PortValue":43332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2843ef58-9238-43f5-93bf-853c9c052fdc","method":"POST","path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43332","PortSpecifier":{"PortValue":43332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144221,"nanos":609647512},"http":{"id":"2843ef58-9238-43f5-93bf-853c9c052fdc","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bCezImherHPmqk1C_Oav3plp176g0e6ihpQVpD2jyabQrYf3xxvZokXLG7gT"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bCezImherHPmqk1C_Oav3plp176g0e6ihpQVpD2jyabQrYf3xxvZokXLG7gT\"}"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","keyName":"e2e-rate-a-1c5c6e","subscription":"e2e-rate-iso-a-1c5c6e","tenant":"e2e-shared-a-257300","userId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\",\"requestedSubscription\":\"e2e-rate-iso-a-1c5c6e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1c5c6e","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1c5c6e"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","keyName":"e2e-rate-a-1c5c6e","selected_subscription":"e2e-rate-iso-a-1c5c6e","selected_subscription_key":"ai-tenant-e2e-shared-a-257300/e2e-rate-iso-a-1c5c6e@ai-tenant-e2e-shared-a-257300/rate-test-model-257300","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1c5c6e","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2843ef58-9238-43f5-93bf-853c9c052fdc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","method":"POST","path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43348","PortSpecifier":{"PortValue":43348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144222,"nanos":648628366},"http":{"id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bCezImherHPmqk1C_Oav3plp176g0e6ihpQVpD2jyabQrYf3xxvZokXLG7gT"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bCezImherHPmqk1C_Oav3plp176g0e6ihpQVpD2jyabQrYf3xxvZokXLG7gT\"}"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","keyName":"e2e-rate-a-1c5c6e","subscription":"e2e-rate-iso-a-1c5c6e","tenant":"e2e-shared-a-257300","userId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\",\"requestedSubscription\":\"e2e-rate-iso-a-1c5c6e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1c5c6e","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1c5c6e"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d822b4eb-bd1f-4b51-bbbe-e15ae32a0882","keyName":"e2e-rate-a-1c5c6e","selected_subscription":"e2e-rate-iso-a-1c5c6e","selected_subscription_key":"ai-tenant-e2e-shared-a-257300/e2e-rate-iso-a-1c5c6e@ai-tenant-e2e-shared-a-257300/rate-test-model-257300","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1c5c6e","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3b9df3e-30cd-406d-bcf4-8f8d66167e95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53326","PortSpecifier":{"PortValue":53326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53326","PortSpecifier":{"PortValue":53326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144235,"nanos":645852606},"http":{"id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fab01fb-c2a8-436a-a82c-a48ccc6cf4d0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59504","PortSpecifier":{"PortValue":59504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2859d40c-85c8-4dc6-813d-676c218be09a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59504","PortSpecifier":{"PortValue":59504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144235,"nanos":683172452},"http":{"id":"2859d40c-85c8-4dc6-813d-676c218be09a","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"]}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c1bceec796fc"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=607272b7-5030-40b5-aaaa-6f48c913a954"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"90a0daba-1d9d-4ba7-b27f-e7ae75d3eeef","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2859d40c-85c8-4dc6-813d-676c218be09a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","method":"POST","path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144235,"nanos":723467077},"http":{"id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-E5xKGmTj6jAIhEOg_gq4M0YgVTx5VvuvgiMqMv3NPPoI9QjUQxwz45Fz8lXY"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-E5xKGmTj6jAIhEOg_gq4M0YgVTx5VvuvgiMqMv3NPPoI9QjUQxwz45Fz8lXY\"}"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","keyName":"e2e-rate-a-955fdc","subscription":"e2e-rate-iso-a-955fdc","tenant":"e2e-shared-a-257300","userId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\",\"requestedSubscription\":\"e2e-rate-iso-a-955fdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-955fdc","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-955fdc"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","keyName":"e2e-rate-a-955fdc","selected_subscription":"e2e-rate-iso-a-955fdc","selected_subscription_key":"ai-tenant-e2e-shared-a-257300/e2e-rate-iso-a-955fdc@ai-tenant-e2e-shared-a-257300/rate-test-model-257300","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-955fdc","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d5340ac-1990-4eb5-aab8-7e797ce34ad4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53338","PortSpecifier":{"PortValue":53338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","method":"POST","path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53338","PortSpecifier":{"PortValue":53338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144236,"nanos":764501675},"http":{"id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-E5xKGmTj6jAIhEOg_gq4M0YgVTx5VvuvgiMqMv3NPPoI9QjUQxwz45Fz8lXY"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-E5xKGmTj6jAIhEOg_gq4M0YgVTx5VvuvgiMqMv3NPPoI9QjUQxwz45Fz8lXY\"}"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","keyName":"e2e-rate-a-955fdc","subscription":"e2e-rate-iso-a-955fdc","tenant":"e2e-shared-a-257300","userId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\",\"requestedSubscription\":\"e2e-rate-iso-a-955fdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-955fdc","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-955fdc"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","keyName":"e2e-rate-a-955fdc","selected_subscription":"e2e-rate-iso-a-955fdc","selected_subscription_key":"ai-tenant-e2e-shared-a-257300/e2e-rate-iso-a-955fdc@ai-tenant-e2e-shared-a-257300/rate-test-model-257300","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-955fdc","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98e9d378-9c85-41ab-a7d0-1a995ae452d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dfb7d31-e457-407b-8587-0243879c7463","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6dfb7d31-e457-407b-8587-0243879c7463","method":"POST","path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions","host":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dfb7d31-e457-407b-8587-0243879c7463","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53346","PortSpecifier":{"PortValue":53346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144237,"nanos":800635712},"http":{"id":"6dfb7d31-e457-407b-8587-0243879c7463","method":"POST","headers":{":authority":"e2e-shared-a-257300.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-257300/rate-test-model-257300/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-E5xKGmTj6jAIhEOg_gq4M0YgVTx5VvuvgiMqMv3NPPoI9QjUQxwz45Fz8lXY"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-E5xKGmTj6jAIhEOg_gq4M0YgVTx5VvuvgiMqMv3NPPoI9QjUQxwz45Fz8lXY\"}"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","keyName":"e2e-rate-a-955fdc","subscription":"e2e-rate-iso-a-955fdc","tenant":"e2e-shared-a-257300","userId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\",\"requestedSubscription\":\"e2e-rate-iso-a-955fdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-257300.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-955fdc","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6dfb7d31-e457-407b-8587-0243879c7463","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-257300/rate-test-model-257300\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-257300/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-955fdc"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfb7d31-e457-407b-8587-0243879c7463","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b59f1398-a597-4b8c-ad0a-0019ae0b18a8","keyName":"e2e-rate-a-955fdc","selected_subscription":"e2e-rate-iso-a-955fdc","selected_subscription_key":"ai-tenant-e2e-shared-a-257300/e2e-rate-iso-a-955fdc@ai-tenant-e2e-shared-a-257300/rate-test-model-257300","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-257300","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-955fdc","namespace":"ai-tenant-e2e-shared-a-257300","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dfb7d31-e457-407b-8587-0243879c7463","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dfb7d31-e457-407b-8587-0243879c7463","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59514","PortSpecifier":{"PortValue":59514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88074626-bbcf-4a2a-baca-81613c5d1f27","method":"POST","path":"/ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297/v1/completions","host":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59514","PortSpecifier":{"PortValue":59514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784144237,"nanos":834190998},"http":{"id":"88074626-bbcf-4a2a-baca-81613c5d1f27","method":"POST","headers":{":authority":"e2e-shared-b-0dc297.apps.80beb7fe-d2d1-4c87-91bd-c1bceec796fc.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Xm8syUObQFrTTuhx_uFWG5Jxy0R3iM32K9QIg2IL8MFkAqGeMAjsevJhDLM7"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Xm8syUObQFrTTuhx_uFWG5Jxy0R3iM32K9QIg2IL8MFkAqGeMAjsevJhDLM7\"}"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8000a8d7-9360-4878-a3a0-b1eabd22167c","keyName":"e2e-rate-b-955fdc","subscription":"e2e-rate-iso-b-955fdc","tenant":"e2e-shared-b-0dc297","userId":"8000a8d7-9360-4878-a3a0-b1eabd22167c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297\",\"requestedSubscription\":\"e2e-rate-iso-b-955fdc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0dc297.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0dc297","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-955fdc","namespace":"ai-tenant-e2e-shared-b-0dc297","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-0dc297/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-955fdc"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8000a8d7-9360-4878-a3a0-b1eabd22167c","keyName":"e2e-rate-b-955fdc","selected_subscription":"e2e-rate-iso-b-955fdc","selected_subscription_key":"ai-tenant-e2e-shared-b-0dc297/e2e-rate-iso-b-955fdc@ai-tenant-e2e-shared-b-0dc297/rate-test-model-0dc297","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0dc297","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-955fdc","namespace":"ai-tenant-e2e-shared-b-0dc297","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-15T19:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88074626-bbcf-4a2a-baca-81613c5d1f27","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/892ad61e0448f87db73808f89533fe1fc4104f65bcff0f9a59a60f819772f7c1"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a652dd502aa10554b9ede1770837953deef3407afab59132d58e6ffc1b84b35"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b31b06f4951bbbd967a27e71d04ffe5501441843d682e7d703830ca203d151c7"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc7171b9bcd7b34160890c0f7410c90b0b4495268bb055f269fdc4b9d30aebc"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/551c11a5af70f8b51f1282731052b6e9d27a22470477e2d984311e50ff155490"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e4dab6b0b116e4198392412ba5b08cfc187a05bbcaaac87e0474635679682d1"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80b586037a475cce2f843aa2640a5c5c104aa56073452237cd8ec5fd22a5b254"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be8eb44c6a6efaccab5998e469a3fd060eb49da37831f273980427c587f7654e"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/233c6c4231c0ce809f09cb662317a231007b6034a9fe51d753207cdeec862da0"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2903ed87355d117f2c1efeab434ef4267f72bca286289ec9b6f085c2abf90ade"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2c33091f2d5c4f5dea30e77f4e016b98c2e4c29de67251e98dcba63fb9d7fab"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63919c06c97ff2f7fe457015528fcc1f83de2623533351d9f26c2af0833d082a"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fa9039b86311aecc32fa340c12d361286cede05af4d8928a40fc97c95cdc6a7"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/371084acf29896db7df90bb6d19b6dc9de1ac78d8c82ea719c64f1decc61012d"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7f842acd68bbc3bc4dc7959cc161b5c2d1c4e46c280b5351ecc232e5165448d"} {"level":"info","ts":"2026-07-15T19:37:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9091c0abf6a5d1446b14e164bf5c6210bf415edb47996c46ba5ccd202886f172"} {"level":"info","ts":"2026-07-15T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41d7c9b5e80c283d295987e149882c18235347cd8226e8ad9b3a60d74dea4280"} {"level":"info","ts":"2026-07-15T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46719ae62ecd353ec99df88a919d45de14e23ca4fb91b4a0e064f6902e2def17"} {"level":"info","ts":"2026-07-15T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/234b2dde87bd78a2d549c47a13cf9ddfe07b62676749da4410f4575d64903df3"} {"level":"info","ts":"2026-07-15T19:37:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c62bcb8d5a2e0e65203fb3f5358feaa3f6b78039f0dfd29d67c60f1fc578c97e"} {"level":"info","ts":"2026-07-15T19:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6b2dbaa55ba90bbee6e921d39509895b705707ce1d861309c0d66650b6e432c"} {"level":"info","ts":"2026-07-15T19:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7235409ce388c4bf39f7852ba348c429cd1802901d657217261c3a1ad888651e"} {"level":"info","ts":"2026-07-15T19:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aadefd9ef6510a668059e98dfaa5d724a52f12d08386a7df523f665f923a36b"} {"level":"info","ts":"2026-07-15T19:38:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/131634efb5a770758aa58ab1185714f97fa9b67e2e5647b31fd5cff6614ab141"}