--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-08-04T00:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"debug","ts":"2026-08-04T00:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55652","PortSpecifier":{"PortValue":55652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","object":"source:{address:{socket_address:{address:\"10.132.0.13:55652\" port_value:55652}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804684 nanos:539674937} http:{id:\"bd19a056-0b8f-40a5-af9f-4bb5406e7c18\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"bd19a056-0b8f-40a5-af9f-4bb5406e7c18\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":539674937,"seconds":1785804684}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55652},"address":"10.132.0.13:55652"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":539674937,"seconds":1785804684},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:55652","port":55652}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/auth-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd19a056-0b8f-40a5-af9f-4bb5406e7c18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"996615b7-e048-4cc1-a006-e7957f7dadf5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","object":"source:{address:{socket_address:{address:\"10.132.0.13:58366\" port_value:58366}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804684 nanos:583685340} http:{id:\"996615b7-e048-4cc1-a006-e7957f7dadf5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"996615b7-e048-4cc1-a006-e7957f7dadf5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"996615b7-e048-4cc1-a006-e7957f7dadf5"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"996615b7-e048-4cc1-a006-e7957f7dadf5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":583685340,"seconds":1785804684}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58366},"address":"10.132.0.13:58366"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"996615b7-e048-4cc1-a006-e7957f7dadf5"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"996615b7-e048-4cc1-a006-e7957f7dadf5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":583685340,"seconds":1785804684},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58366","port":58366}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/auth-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"996615b7-e048-4cc1-a006-e7957f7dadf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58374","PortSpecifier":{"PortValue":58374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","method":"GET","path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","object":"source:{address:{socket_address:{address:\"10.132.0.13:58374\" port_value:58374}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804684 nanos:629753718} http:{id:\"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6\"} path:\"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","method":"GET","path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":629753718,"seconds":1785804684}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58374},"address":"10.132.0.13:58374"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","method":"GET","path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":629753718,"seconds":1785804684},"url_path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58374","port":58374}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/auth-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3c1dc62-ace7-4a6c-80ad-935ff9a986c6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:55666","PortSpecifier":{"PortValue":55666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","method":"GET","path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","object":"source:{address:{socket_address:{address:\"10.132.0.13:55666\" port_value:55666}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804684 nanos:665314743} http:{id:\"0fb408ee-f6d4-435c-97ff-ad9bfe56d760\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0fb408ee-f6d4-435c-97ff-ad9bfe56d760\"} path:\"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","method":"GET","path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":665314743,"seconds":1785804684}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55666},"address":"10.132.0.13:55666"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","method":"GET","path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":665314743,"seconds":1785804684},"url_path":"/maas-api/v1/api-keys/f4f526e1-0c79-436b-92db-cf71d3551a0f","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:55666","port":55666}}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/auth-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fb408ee-f6d4-435c-97ff-ad9bfe56d760","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"info","ts":"2026-08-04T00:51:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"error","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:51:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"info","ts":"2026-08-04T00:51:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47662","PortSpecifier":{"PortValue":47662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","object":"source:{address:{socket_address:{address:\"10.132.0.13:47662\" port_value:47662}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804710 nanos:920370581} http:{id:\"9a1f2c20-5986-46b5-9b81-1bfca5822302\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9a1f2c20-5986-46b5-9b81-1bfca5822302\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9a1f2c20-5986-46b5-9b81-1bfca5822302"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":920370581,"seconds":1785804710}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47662},"address":"10.132.0.13:47662"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9a1f2c20-5986-46b5-9b81-1bfca5822302"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":920370581,"seconds":1785804710},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47662","port":47662}}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/auth-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a1f2c20-5986-46b5-9b81-1bfca5822302","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44974","PortSpecifier":{"PortValue":44974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afba007c-f379-4a7a-bfe7-f77505383aff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","object":"source:{address:{socket_address:{address:\"10.132.0.13:44974\" port_value:44974}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804710 nanos:965331120} http:{id:\"afba007c-f379-4a7a-bfe7-f77505383aff\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"afba007c-f379-4a7a-bfe7-f77505383aff\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"afba007c-f379-4a7a-bfe7-f77505383aff"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"afba007c-f379-4a7a-bfe7-f77505383aff","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":965331120,"seconds":1785804710}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44974},"address":"10.132.0.13:44974"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"afba007c-f379-4a7a-bfe7-f77505383aff"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"afba007c-f379-4a7a-bfe7-f77505383aff","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":965331120,"seconds":1785804710},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:44974","port":44974}}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/auth-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afba007c-f379-4a7a-bfe7-f77505383aff","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47664","PortSpecifier":{"PortValue":47664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","object":"source:{address:{socket_address:{address:\"10.132.0.13:47664\" port_value:47664}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804711 nanos:11853211} http:{id:\"47630d85-8c96-49ef-ba4d-b0ecadcc61c2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"47630d85-8c96-49ef-ba4d-b0ecadcc61c2\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XgtSGWN8BPeV0ZSo_NOCofCGM7H4Y0TnaPwfKfFJGgsVcWxAMXffEy5XQq5L"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a6d39ae-4765-43fc-a0e9-5f6e090190a5","keyName":"e2e-auth-iso-a-23b5f3","subscription":"e2e-auth-iso-f05b9a","tenant":"e2e-shared-a-a5b2e0","userId":"1a6d39ae-4765-43fc-a0e9-5f6e090190a5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":11853211,"seconds":1785804711}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47664},"address":"10.132.0.13:47664"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":11853211,"seconds":1785804711},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47664","port":47664}}} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/auth-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f05b9a"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:51:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47630d85-8c96-49ef-ba4d-b0ecadcc61c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecb1396e480dd9c27b0e9ecd90a1bd7a1e467da7eb0659078121d04ffce092ed"} {"level":"info","ts":"2026-08-04T00:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8635304399a545afc2699b018c9b56b01aeaa32b525de5ef04fc7cb9f597d90e"} {"level":"info","ts":"2026-08-04T00:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5019e40321ac7506c1098117867bbf67143776fbb7378ed99934dd1600a84d57"} {"level":"info","ts":"2026-08-04T00:51:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa8cbb7dae900853622d58dfff9ebb30ece0e8ed2cc8e232883e6802c3662bb5"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e642b18d90b9090220117c53c75c1e2dc41ce2364b8ec4bd736c5add1b514d4b"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e9c1949dc6a5aa079de021b31a3c3af1f4c1a56bf14d9d1684ffe1aebdf197a"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8db402b6b5c997481d4e730839f2085e5b70327f22554545f98895b2bbfdbe6e"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92d18868f55cb451f39da410aa0c3d424d78da95974792e1cdafb2e25418d8e1"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f6d2d6862fcb33104be31e7567249f35edb4eb64ebcecce7720606190f7ebbe"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7ff74641af048d0512a2d5fbee1cba561f9085d7beb3fae427f21d471fad761"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf66d96564c0bdaaeef72553b6b6b404795de3df5adde2338f00322cf13a7a9e"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/873128146294035eb8e8151309ffad8596a7e4e9e4f80ef3e75143c19c208b3d"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27be4d483781f4f7758068268edbf38a2d82d1c86f3bf41f8f652a271f27b2df"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95fa8259af3635b3e84c6e329c379e2c0642cb7d1f1def874c96af29744f12d6"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fd8744b142e7c6dca31819fcc688292ff53bf8e3f1d2ddc37cd52605c9f6805"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c2ddee57dedc240fc571f9284d76230e1fd4a5b49e792661b844ae99ab454b"} {"level":"info","ts":"2026-08-04T00:51:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790"} {"level":"error","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790"} {"level":"error","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780"} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f"} {"level":"info","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"error","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33672","PortSpecifier":{"PortValue":33672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"622d8f6b-8186-4303-bc0f-751a5c194753","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","object":"source:{address:{socket_address:{address:\"10.132.0.13:33672\" port_value:33672}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804828 nanos:966421843} http:{id:\"622d8f6b-8186-4303-bc0f-751a5c194753\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"622d8f6b-8186-4303-bc0f-751a5c194753\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"622d8f6b-8186-4303-bc0f-751a5c194753"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"622d8f6b-8186-4303-bc0f-751a5c194753","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":966421843,"seconds":1785804828}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33672},"address":"10.132.0.13:33672"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"622d8f6b-8186-4303-bc0f-751a5c194753"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"622d8f6b-8186-4303-bc0f-751a5c194753","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":966421843,"seconds":1785804828},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:33672","port":33672}}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/sub-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:53:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"622d8f6b-8186-4303-bc0f-751a5c194753","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"459eb8b7-58c8-410d-8816-54c966610a63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57090","PortSpecifier":{"PortValue":57090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"459eb8b7-58c8-410d-8816-54c966610a63","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"459eb8b7-58c8-410d-8816-54c966610a63","object":"source:{address:{socket_address:{address:\"10.132.0.13:57090\" port_value:57090}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804829 nanos:16634143} http:{id:\"459eb8b7-58c8-410d-8816-54c966610a63\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"459eb8b7-58c8-410d-8816-54c966610a63\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"459eb8b7-58c8-410d-8816-54c966610a63","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"459eb8b7-58c8-410d-8816-54c966610a63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"459eb8b7-58c8-410d-8816-54c966610a63"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"459eb8b7-58c8-410d-8816-54c966610a63","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":16634143,"seconds":1785804829}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57090},"address":"10.132.0.13:57090"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"459eb8b7-58c8-410d-8816-54c966610a63"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"459eb8b7-58c8-410d-8816-54c966610a63","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":16634143,"seconds":1785804829},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:57090","port":57090}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/sub-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"459eb8b7-58c8-410d-8816-54c966610a63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"459eb8b7-58c8-410d-8816-54c966610a63","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"459eb8b7-58c8-410d-8816-54c966610a63","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:33680","PortSpecifier":{"PortValue":33680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","object":"source:{address:{socket_address:{address:\"10.132.0.13:33680\" port_value:33680}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804829 nanos:58523024} http:{id:\"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wt6aw5GWPKawjHgL_ssWLeEBrmQ5CvV0IS6oGcqQUCsEjC2WgQrjq6W0uzxB"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c4a4073-923e-444c-be9f-582fb0fd953c","keyName":"e2e-sub-iso-328d9e","subscription":"e2e-a-only-b92124","tenant":"e2e-shared-a-a5b2e0","userId":"7c4a4073-923e-444c-be9f-582fb0fd953c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":58523024,"seconds":1785804829}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33680},"address":"10.132.0.13:33680"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":58523024,"seconds":1785804829},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:33680","port":33680}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/sub-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b92124"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d5a6c17-3c2f-4e51-8521-f59c2a7c1dbd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57098","PortSpecifier":{"PortValue":57098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","object":"source:{address:{socket_address:{address:\"10.132.0.13:57098\" port_value:57098}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804829 nanos:100766245} http:{id:\"ff84ebf4-b5d4-4db3-b328-9aac6084c422\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ff84ebf4-b5d4-4db3-b328-9aac6084c422\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Frhgn4N6RnPvc6tU_qYsf4nI1Bo2aIyvYvWbFVTy90vm7fDeJPMGNorOJlHR"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b800ae3b-c810-4de7-bc8e-710e40a9c330","keyName":"e2e-sub-iso-bf418b","subscription":"e2e-b-only-b92124","tenant":"e2e-shared-b-5396f3","userId":"b800ae3b-c810-4de7-bc8e-710e40a9c330","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":100766245,"seconds":1785804829}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57098},"address":"10.132.0.13:57098"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":100766245,"seconds":1785804829},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:57098","port":57098}}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/sub-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b92124"} {"level":"info","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:53:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff84ebf4-b5d4-4db3-b328-9aac6084c422","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"info","ts":"2026-08-04T00:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"error","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"error","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"debug","ts":"2026-08-04T00:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49952","PortSpecifier":{"PortValue":49952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","object":"source:{address:{socket_address:{address:\"10.132.0.13:49952\" port_value:49952}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804852 nanos:435686629} http:{id:\"146517c9-cbbb-4e1d-89d9-2205eabeb77c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"146517c9-cbbb-4e1d-89d9-2205eabeb77c\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":435686629,"seconds":1785804852}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49952},"address":"10.132.0.13:49952"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":435686629,"seconds":1785804852},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:49952","port":49952}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/sub-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"146517c9-cbbb-4e1d-89d9-2205eabeb77c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43974","PortSpecifier":{"PortValue":43974}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"188a436b-bdff-472e-a65e-82afe0fc01bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","object":"source:{address:{socket_address:{address:\"10.132.0.13:43974\" port_value:43974}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804852 nanos:474356278} http:{id:\"188a436b-bdff-472e-a65e-82afe0fc01bf\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"188a436b-bdff-472e-a65e-82afe0fc01bf\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"188a436b-bdff-472e-a65e-82afe0fc01bf"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"188a436b-bdff-472e-a65e-82afe0fc01bf","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":474356278,"seconds":1785804852}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":43974},"address":"10.132.0.13:43974"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"188a436b-bdff-472e-a65e-82afe0fc01bf"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"188a436b-bdff-472e-a65e-82afe0fc01bf","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":474356278,"seconds":1785804852},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:43974","port":43974}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/sub-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188a436b-bdff-472e-a65e-82afe0fc01bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","object":"source:{address:{socket_address:{address:\"10.132.0.13:49958\" port_value:49958}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804852 nanos:516261039} http:{id:\"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12MMaW93OGnYNrEiP_hX6dyXwce8CunukwfalwEUbH1ZYriEPC6rrOcjRoVrH"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb4922d-9a2d-455b-90f9-339bf0f64bf2","keyName":"e2e-sub-iso-54e715","subscription":"e2e-shared-sub-8f097d","tenant":"e2e-shared-a-a5b2e0","userId":"dcb4922d-9a2d-455b-90f9-339bf0f64bf2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":516261039,"seconds":1785804852}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49958},"address":"10.132.0.13:49958"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":516261039,"seconds":1785804852},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:49958","port":49958}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/sub-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8f097d"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5ffcadc-ab6b-40b3-9f1e-08d08ab212d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:43984","PortSpecifier":{"PortValue":43984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","object":"source:{address:{socket_address:{address:\"10.132.0.13:43984\" port_value:43984}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804852 nanos:549173990} http:{id:\"a1ae53b6-e863-4777-b99e-fef3eb94698f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a1ae53b6-e863-4777-b99e-fef3eb94698f\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-aaxkWo787AK5AA2u_iX1xsJhHUXRXSKUcgTr0u98FVwbOBJaKh4WELwSjerq"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8787cd38-cde0-4709-a7a8-7b88d0a0effc","keyName":"e2e-sub-iso-a5f23c","subscription":"e2e-shared-sub-8f097d","tenant":"e2e-shared-b-5396f3","userId":"8787cd38-cde0-4709-a7a8-7b88d0a0effc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a1ae53b6-e863-4777-b99e-fef3eb94698f"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":549173990,"seconds":1785804852}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":43984},"address":"10.132.0.13:43984"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a1ae53b6-e863-4777-b99e-fef3eb94698f"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":549173990,"seconds":1785804852},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:43984","port":43984}}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/sub-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8f097d"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1ae53b6-e863-4777-b99e-fef3eb94698f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be33516ee804c3a39297f5985610daab6681561156bdbfa48b08655644d768f"} {"level":"info","ts":"2026-08-04T00:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0a5de84579724d071757905f1ac63c8b63c90d7188297141c952b063c6760c2"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b00b6378e55aa963246fec02c8de841c2799bfa2999850ea1c0c4be2afed11c"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7272824790d270896c7a5936d10faaade3d073846aaf3e368e230bff51d130cf"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3628a739681a3065574e8531996873ba5dddfd7eeaf1c04a37f9714ca5834790"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c7ede62434107d11cc45153f06387d5f095bdfed36fd9b04b6e45503d537780"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad14a3145e85f11062c8de422584b3c133dacb02ef3e1c788bd2020b3cc5623e"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03161125732ccaa791594c618f61b36972f65ed3166f418f42e8dd2a994422e0"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7724ce7d14dbee476ca96888cd1f5181f3f9c86ec0d72a74f92788002db3c725"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7cc547684bba89e766eeba88465bd67be211f51778324813f966cb066da2112"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d9d1372f2687b94b89c6e964c127ce6e9571a13811beae9043aee6191322a4b"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb742f595afbbf5bfff536f2a5efc54bb72be6db9fa242a44c42697394032eed"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a846a162ca5f401ab4be85fb4f47a1aec2663b9b2197209cf51bfb6af6b6682d"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/366562c2fbd9e7515221e8e87bdf24ad3b67a0e8683000ace18b4b0e5da9a3b5"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84c4a56dcf3b2245f6cd7af3e61d960deab6f71c8f77c984d07c8af6023dd2fc"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:54:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72105ce98869fff657ad209c9c424a3bd0ddba62ad510605e175802dfeaa0cbe"} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"error","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0"} {"level":"error","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661"} {"level":"info","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372"} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"debug","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"} {"level":"info","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58244","PortSpecifier":{"PortValue":58244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","object":"source:{address:{socket_address:{address:\"10.132.0.13:58244\" port_value:58244}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804944 nanos:402517336} http:{id:\"b783442c-1814-44e8-8cc9-5d4026e5a73b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b783442c-1814-44e8-8cc9-5d4026e5a73b\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b783442c-1814-44e8-8cc9-5d4026e5a73b"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":402517336,"seconds":1785804944}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58244},"address":"10.132.0.13:58244"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b783442c-1814-44e8-8cc9-5d4026e5a73b"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":402517336,"seconds":1785804944},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58244","port":58244}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b783442c-1814-44e8-8cc9-5d4026e5a73b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:51698","PortSpecifier":{"PortValue":51698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","object":"source:{address:{socket_address:{address:\"10.132.0.13:51698\" port_value:51698}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804944 nanos:456802329} http:{id:\"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":456802329,"seconds":1785804944}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51698},"address":"10.132.0.13:51698"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":456802329,"seconds":1785804944},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:51698","port":51698}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65fc5d6a-7939-4151-9b4c-47b6b10f4bc2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58248","PortSpecifier":{"PortValue":58248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"26ee8676-c096-4ede-99d3-e9dc6491979b","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","object":"source:{address:{socket_address:{address:\"10.132.0.13:58248\" port_value:58248}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804944 nanos:504532227} http:{id:\"26ee8676-c096-4ede-99d3-e9dc6491979b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"26ee8676-c096-4ede-99d3-e9dc6491979b\"} path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M6qDfRZPQHET2E7J_NT9I2KgmQcdZKPT3oPHZIQYjWRECljki533umkWyUqU"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","keyName":"e2e-rate-a-6d179a","subscription":"e2e-rate-iso-a-6d179a","tenant":"e2e-shared-a-a5b2e0","userId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d179a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"26ee8676-c096-4ede-99d3-e9dc6491979b"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"26ee8676-c096-4ede-99d3-e9dc6491979b","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":504532227,"seconds":1785804944}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58248},"address":"10.132.0.13:58248"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"26ee8676-c096-4ede-99d3-e9dc6491979b"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"26ee8676-c096-4ede-99d3-e9dc6491979b","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":504532227,"seconds":1785804944},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58248","port":58248}}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d179a"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","keyName":"e2e-rate-a-6d179a","selected_subscription":"e2e-rate-iso-a-6d179a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-6d179a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d179a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"26ee8676-c096-4ede-99d3-e9dc6491979b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58252","PortSpecifier":{"PortValue":58252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"694bdf04-e659-4b67-82e3-60e6590a1823","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","object":"source:{address:{socket_address:{address:\"10.132.0.13:58252\" port_value:58252}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804945 nanos:603558879} http:{id:\"694bdf04-e659-4b67-82e3-60e6590a1823\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"694bdf04-e659-4b67-82e3-60e6590a1823\"} path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M6qDfRZPQHET2E7J_NT9I2KgmQcdZKPT3oPHZIQYjWRECljki533umkWyUqU"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","keyName":"e2e-rate-a-6d179a","subscription":"e2e-rate-iso-a-6d179a","tenant":"e2e-shared-a-a5b2e0","userId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d179a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"694bdf04-e659-4b67-82e3-60e6590a1823"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"694bdf04-e659-4b67-82e3-60e6590a1823","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":603558879,"seconds":1785804945}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58252},"address":"10.132.0.13:58252"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"694bdf04-e659-4b67-82e3-60e6590a1823"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"694bdf04-e659-4b67-82e3-60e6590a1823","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":603558879,"seconds":1785804945},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:58252","port":58252}}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d179a"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","keyName":"e2e-rate-a-6d179a","selected_subscription":"e2e-rate-iso-a-6d179a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-6d179a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d179a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:55:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"694bdf04-e659-4b67-82e3-60e6590a1823","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47376","PortSpecifier":{"PortValue":47376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5c322ef-43f9-49fb-b185-d151a387690e","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","object":"source:{address:{socket_address:{address:\"10.132.0.13:47376\" port_value:47376}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804946 nanos:678902477} http:{id:\"e5c322ef-43f9-49fb-b185-d151a387690e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"e5c322ef-43f9-49fb-b185-d151a387690e\"} path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M6qDfRZPQHET2E7J_NT9I2KgmQcdZKPT3oPHZIQYjWRECljki533umkWyUqU"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","keyName":"e2e-rate-a-6d179a","subscription":"e2e-rate-iso-a-6d179a","tenant":"e2e-shared-a-a5b2e0","userId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d179a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e5c322ef-43f9-49fb-b185-d151a387690e"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"e5c322ef-43f9-49fb-b185-d151a387690e","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":678902477,"seconds":1785804946}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47376},"address":"10.132.0.13:47376"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e5c322ef-43f9-49fb-b185-d151a387690e"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"e5c322ef-43f9-49fb-b185-d151a387690e","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":678902477,"seconds":1785804946},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47376","port":47376}}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6d179a"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"17a4d48c-ffd5-47ae-bb62-e753630484e7","keyName":"e2e-rate-a-6d179a","selected_subscription":"e2e-rate-iso-a-6d179a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-6d179a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6d179a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5c322ef-43f9-49fb-b185-d151a387690e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"info","ts":"2026-08-04T00:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"} {"level":"info","ts":"2026-08-04T00:55:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"} {"level":"info","ts":"2026-08-04T00:55:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"error","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"error","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59284","PortSpecifier":{"PortValue":59284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","object":"source:{address:{socket_address:{address:\"10.132.0.13:59284\" port_value:59284}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804968 nanos:696178535} http:{id:\"9f419973-d3e4-43bd-ab51-ccd0ff154099\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9f419973-d3e4-43bd-ab51-ccd0ff154099\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f419973-d3e4-43bd-ab51-ccd0ff154099"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":696178535,"seconds":1785804968}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59284},"address":"10.132.0.13:59284"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9f419973-d3e4-43bd-ab51-ccd0ff154099"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":696178535,"seconds":1785804968},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59284","port":59284}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f419973-d3e4-43bd-ab51-ccd0ff154099","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57984","PortSpecifier":{"PortValue":57984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","object":"source:{address:{socket_address:{address:\"10.132.0.13:57984\" port_value:57984}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804968 nanos:733903887} http:{id:\"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":733903887,"seconds":1785804968}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57984},"address":"10.132.0.13:57984"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":733903887,"seconds":1785804968},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:57984","port":57984}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9fe98a77-0eb0-4b5e-ba70-f637bbde33bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59286","PortSpecifier":{"PortValue":59286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","object":"source:{address:{socket_address:{address:\"10.132.0.13:59286\" port_value:59286}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804968 nanos:774264823} http:{id:\"13b8c8ac-bc83-46b8-99c9-804766a120f2\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"13b8c8ac-bc83-46b8-99c9-804766a120f2\"} path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JDxhP5BR8coEzUWA_6oS86H6xIqHF6C59ZfqxnjHV55hr9PlknHuxdFKpmGl"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","subscription":"e2e-rate-iso-a-8b4c5a","tenant":"e2e-shared-a-a5b2e0","userId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"13b8c8ac-bc83-46b8-99c9-804766a120f2"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":774264823,"seconds":1785804968}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59286},"address":"10.132.0.13:59286"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"13b8c8ac-bc83-46b8-99c9-804766a120f2"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":774264823,"seconds":1785804968},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59286","port":59286}}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b4c5a"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","selected_subscription":"e2e-rate-iso-a-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-8b4c5a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b8c8ac-bc83-46b8-99c9-804766a120f2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59298","PortSpecifier":{"PortValue":59298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac55dba-c428-44b5-ad06-816a328ede64","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","object":"source:{address:{socket_address:{address:\"10.132.0.13:59298\" port_value:59298}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804969 nanos:818594296} http:{id:\"bac55dba-c428-44b5-ad06-816a328ede64\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"bac55dba-c428-44b5-ad06-816a328ede64\"} path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JDxhP5BR8coEzUWA_6oS86H6xIqHF6C59ZfqxnjHV55hr9PlknHuxdFKpmGl"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","subscription":"e2e-rate-iso-a-8b4c5a","tenant":"e2e-shared-a-a5b2e0","userId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac55dba-c428-44b5-ad06-816a328ede64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bac55dba-c428-44b5-ad06-816a328ede64"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"bac55dba-c428-44b5-ad06-816a328ede64","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":818594296,"seconds":1785804969}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59298},"address":"10.132.0.13:59298"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bac55dba-c428-44b5-ad06-816a328ede64"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"bac55dba-c428-44b5-ad06-816a328ede64","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":818594296,"seconds":1785804969},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59298","port":59298}}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b4c5a"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac55dba-c428-44b5-ad06-816a328ede64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","selected_subscription":"e2e-rate-iso-a-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-8b4c5a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac55dba-c428-44b5-ad06-816a328ede64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:56:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac55dba-c428-44b5-ad06-816a328ede64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:59312","PortSpecifier":{"PortValue":59312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","object":"source:{address:{socket_address:{address:\"10.132.0.13:59312\" port_value:59312}}} destination:{address:{socket_address:{address:\"10.133.0.58:443\" port_value:443}}} request:{time:{seconds:1785804970 nanos:856660510} http:{id:\"65d4e39b-cf49-4427-b1be-154cd6e9e896\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"65d4e39b-cf49-4427-b1be-154cd6e9e896\"} path:\"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions\" host:\"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JDxhP5BR8coEzUWA_6oS86H6xIqHF6C59ZfqxnjHV55hr9PlknHuxdFKpmGl"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","subscription":"e2e-rate-iso-a-8b4c5a","tenant":"e2e-shared-a-a5b2e0","userId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a5b2e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"65d4e39b-cf49-4427-b1be-154cd6e9e896"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":856660510,"seconds":1785804970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59312},"address":"10.132.0.13:59312"}}}}},"destination":{"address":"10.133.0.58:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"},"headers":{":authority":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-a5b2e0-kserve-workload-svc.ai-tenant-e2e-shared-a-a5b2e0.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdC03NjhiNzhkNGRkLXduNmJnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWE1YjJlMC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1hNWIyZTAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.58~e2e-shared-a-a5b2e0-openshift-default-768b78d4dd-wn6bg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"65d4e39b-cf49-4427-b1be-154cd6e9e896"},"host":"e2e-shared-a-a5b2e0.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","method":"POST","path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":856660510,"seconds":1785804970},"url_path":"/ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:59312","port":59312}}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8b4c5a"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ec65c78b-a35d-4268-98ba-f72bac0c5a4d","keyName":"e2e-rate-a-8b4c5a","selected_subscription":"e2e-rate-iso-a-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-a-a5b2e0/e2e-rate-iso-a-8b4c5a@ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a5b2e0/models/facebook/opt-125m","name":"rate-test-model-a5b2e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8b4c5a","namespace":"ai-tenant-e2e-shared-a-a5b2e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a5b2e0/rate-test-model-a5b2e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65d4e39b-cf49-4427-b1be-154cd6e9e896","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:57998","PortSpecifier":{"PortValue":57998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2bdbefd-627d-4819-bd93-e47c987dba46","method":"POST","path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","object":"source:{address:{socket_address:{address:\"10.132.0.13:57998\" port_value:57998}}} destination:{address:{socket_address:{address:\"10.134.0.59:443\" port_value:443}}} request:{time:{seconds:1785804970 nanos:893437360} http:{id:\"f2bdbefd-627d-4819-bd93-e47c987dba46\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-5396f3-kserve-workload-svc.ai-tenant-e2e-shared-b-5396f3.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdC02YmQ5ODc2OWY2LTc2NnF2CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTUzOTZmMy1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01Mzk2ZjMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"f2bdbefd-627d-4819-bd93-e47c987dba46\"} path:\"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions\" host:\"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GmJpJI4WFbi6fVTW_b2Q3SNbI4xgz2qv1Xg13mjyb9w2lB3Fjkde277yYhW8"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ff9d2125-825f-4065-9436-0c6b73a65f36","keyName":"e2e-rate-b-8b4c5a","subscription":"e2e-rate-iso-b-8b4c5a","tenant":"e2e-shared-b-5396f3","userId":"ff9d2125-825f-4065-9436-0c6b73a65f36","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5396f3.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m","name":"rate-test-model-5396f3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b4c5a","namespace":"ai-tenant-e2e-shared-b-5396f3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3"}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5396f3-kserve-workload-svc.ai-tenant-e2e-shared-b-5396f3.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f2bdbefd-627d-4819-bd93-e47c987dba46"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"f2bdbefd-627d-4819-bd93-e47c987dba46","method":"POST","path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":893437360,"seconds":1785804970}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57998},"address":"10.132.0.13:57998"}}}}},"destination":{"address":"10.134.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"},"headers":{":authority":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-5396f3-kserve-workload-svc.ai-tenant-e2e-shared-b-5396f3.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.59~e2e-shared-b-5396f3-openshift-default-6bd98769f6-766qv.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f2bdbefd-627d-4819-bd93-e47c987dba46"},"host":"e2e-shared-b-5396f3.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"f2bdbefd-627d-4819-bd93-e47c987dba46","method":"POST","path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":893437360,"seconds":1785804970},"url_path":"/ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:57998","port":57998}}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-8b4c5a"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ff9d2125-825f-4065-9436-0c6b73a65f36","keyName":"e2e-rate-b-8b4c5a","selected_subscription":"e2e-rate-iso-b-8b4c5a","selected_subscription_key":"ai-tenant-e2e-shared-b-5396f3/e2e-rate-iso-b-8b4c5a@ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-5396f3/models/facebook/opt-125m","name":"rate-test-model-5396f3","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-8b4c5a","namespace":"ai-tenant-e2e-shared-b-5396f3","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-5396f3/rate-test-model-5396f3"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:56:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2bdbefd-627d-4819-bd93-e47c987dba46","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f95f25eda12327c68c00f4c38c3d852d8a03711292c9e38db7be59adf56aea13"} {"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1a0d3215d95471c34a3e534ff4a5ddfbab4318b149d9bc04957b5166835610b"} {"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02cdd198127cd047182f613340fba4b0636e9d336cea7d994f5da490a66587a5"} {"level":"info","ts":"2026-08-04T00:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7cfae05588644c0ff054c7c5e2cab72e2d067a235cad7a19f54da479596420"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec0a5e118334bab94a35cebad956c99a8fad39083797fc977a0565fa675d2ccf"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/514ef130ca5cb89db4ab26a4f6d4c0a926a7df0c4c5592776f520fc81e750b1a"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1e2a376df17bd5f21418efc51f5b9ec233b76b1ff826fe224fa8f1484c10372"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c228b02e99e6afe8f22675373af1179821b83498e4be5624288eb454a7389307"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a5f3a2600098842ab6bb90d1a0d8c7124a9b6b53badda023918d77c6af7a3d9"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7aefaa9d3f3897505a21c06c94cd13bd4099555414a4a7296b641ebe64437d8d"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5345826fa62b6789309cd0361736b95d0a76fe55171f6c6afcc0b5f4e5295cf7"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1c9c12cabe463a7adac1ffbd1fd2a7b8cfa7b6cdb442bd9f143f9e2aff8b774"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7604af6abf81f78a8ffffb598b361a90a2ff3727e91d1c9626be63e1583cb83"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf48129fe1e85a61603eccaabcbead87dee628373e76b3be92939e7d477331d7"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1974d189e8f3ea766bba86c518d7afb1f7fe800b5519b6968e83f1167499e3c7"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2caba9a14f8038f8b54d85d2d78cf6ad993870844e317724239d0805aa7a5661"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f4999d599321301716cc97e99fc7578d5bf8bf8beca4b5be2c3e463624bafd"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ff5449b840b42bc651a7bfa3c85619bfd4cf4f24c131b5aea45df359406c5ca"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14be39735905c6473259b5a72f9486f6f3a1ac1adbb8b19142c481108d603032"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6835ea2a3de369e285b29e4a6795a950a4210e75f5db989343d44c90854130a0"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c97b280c8448b3640acb4f61a81c2100644b99fc4d373a34c9d6f0bad188f0a8"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42a1cadd71621076ea04fffb97f2693bacdcf2b88edcda4c6230e802b61e0833"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b17829f0a1bfef02160520d14eff57def6bd9d664437879d0097b36530ddede"} {"level":"info","ts":"2026-08-04T00:56:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/413fdeaacfb33a274aa2c606bad7e9d73b521d8692681ba4eba59d59dc01822a"} {"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40162","PortSpecifier":{"PortValue":40162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","object":"source:{address:{socket_address:{address:\"10.132.0.13:40162\" port_value:40162}}} destination:{address:{socket_address:{address:\"10.133.0.42:443\" port_value:443}}} request:{time:{seconds:1785805054 nanos:411062900} http:{id:\"5220697c-a157-46cb-8c7f-aa784f42f1b9\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5220697c-a157-46cb-8c7f-aa784f42f1b9\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5220697c-a157-46cb-8c7f-aa784f42f1b9"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":411062900,"seconds":1785805054}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40162},"address":"10.132.0.13:40162"}}}}},"destination":{"address":"10.133.0.42:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5220697c-a157-46cb-8c7f-aa784f42f1b9"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":411062900,"seconds":1785805054},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:40162","port":40162}}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5220697c-a157-46cb-8c7f-aa784f42f1b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:40178","PortSpecifier":{"PortValue":40178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","object":"source:{address:{socket_address:{address:\"10.132.0.13:40178\" port_value:40178}}} destination:{address:{socket_address:{address:\"10.133.0.42:443\" port_value:443}}} request:{time:{seconds:1785805054 nanos:464676785} http:{id:\"3a5039da-ffff-4f2d-9596-0c512864b8e4\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"3a5039da-ffff-4f2d-9596-0c512864b8e4\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O7tHAWSisMREcscn_bfL1zsdFyzHYNWdeBD67W5JnVBMWlD4ZhgwMOyr0yGR"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f7a5c90-425c-4121-9c0a-186fe47cd86b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"1f7a5c90-425c-4121-9c0a-186fe47cd86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWc2OHhzCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3a5039da-ffff-4f2d-9596-0c512864b8e4"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":464676785,"seconds":1785805054}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40178},"address":"10.132.0.13:40178"}}}}},"destination":{"address":"10.133.0.42:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.42~maas-default-gateway-openshift-default-5ccb968c66-g68xs.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"3a5039da-ffff-4f2d-9596-0c512864b8e4"},"host":"maas.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":464676785,"seconds":1785805054},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:40178","port":40178}}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1f7a5c90-425c-4121-9c0a-186fe47cd86b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a5039da-ffff-4f2d-9596-0c512864b8e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"error","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"} {"level":"error","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-04T00:58:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"} {"level":"info","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"} {"level":"debug","ts":"2026-08-04T00:58:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47864","PortSpecifier":{"PortValue":47864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","object":"source:{address:{socket_address:{address:\"10.132.0.13:47864\" port_value:47864}}} destination:{address:{socket_address:{address:\"10.134.0.67:443\" port_value:443}}} request:{time:{seconds:1785805107 nanos:416336157} http:{id:\"88591a3d-1dd7-40eb-9eaf-32031ba52cf6\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"88591a3d-1dd7-40eb-9eaf-32031ba52cf6\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f43d6856a86c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f6f2b790-0a21-4db0-86be-32d0de9b469d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5007189e-acbe-4d5a-9b79-f5000dc6b148","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":416336157,"seconds":1785805107}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47864},"address":"10.132.0.13:47864"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"},"headers":{":authority":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdC01Yzg0YzlkN2JkLW04OXpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":416336157,"seconds":1785805107},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47864","port":47864}}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-579628/ipp-route-579628\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:58:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88591a3d-1dd7-40eb-9eaf-32031ba52cf6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:47866","PortSpecifier":{"PortValue":47866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85ae20df-2380-450b-994c-a7bc87a79681","method":"POST","path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","object":"source:{address:{socket_address:{address:\"10.132.0.13:47866\" port_value:47866}}} destination:{address:{socket_address:{address:\"10.134.0.67:443\" port_value:443}}} request:{time:{seconds:1785805109 nanos:479898089} http:{id:\"85ae20df-2380-450b-994c-a7bc87a79681\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-579628-kserve-workload-svc.ai-tenant-e2e-ipp-a-579628.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdC01Yzg0YzlkN2JkLW04OXpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"85ae20df-2380-450b-994c-a7bc87a79681\"} path:\"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions\" host:\"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-blJywuJYVORRIinl_xvL2wm8n8CxrBvTzgPg0PAW22pNYHLj4ZNP7hSxnCfI"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a78d98da-381f-47b8-acd0-1b702fa9b1e7","keyName":"e2e-ipp-579628","subscription":"ipp-route-579628-sub","tenant":"e2e-ipp-a-579628","userId":"a78d98da-381f-47b8-acd0-1b702fa9b1e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-579628.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m","name":"ipp-route-579628","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-579628-sub","namespace":"ai-tenant-e2e-ipp-a-579628","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-579628/ipp-route-579628"}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85ae20df-2380-450b-994c-a7bc87a79681","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-579628-kserve-workload-svc.ai-tenant-e2e-ipp-a-579628.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"85ae20df-2380-450b-994c-a7bc87a79681"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"85ae20df-2380-450b-994c-a7bc87a79681","method":"POST","path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":479898089,"seconds":1785805109}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":47866},"address":"10.132.0.13:47866"}}}}},"destination":{"address":"10.134.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"},"headers":{":authority":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-579628-kserve-workload-svc.ai-tenant-e2e-ipp-a-579628.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdC01Yzg0YzlkN2JkLW04OXpiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLTU3OTYyOC1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS01Nzk2Mjgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.67~e2e-ipp-a-579628-openshift-default-5c84c9d7bd-m89zb.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.13","x-forwarded-host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"85ae20df-2380-450b-994c-a7bc87a79681"},"host":"e2e-ipp-a-579628.apps.63b1b8c4-8b76-4646-b85b-f43d6856a86c.prod.konfluxeaas.com","id":"85ae20df-2380-450b-994c-a7bc87a79681","method":"POST","path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":479898089,"seconds":1785805109},"url_path":"/ai-tenant-e2e-ipp-a-579628/ipp-route-579628/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.13:47866","port":47866}}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-579628/ipp-route-579628\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-579628-sub"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ae20df-2380-450b-994c-a7bc87a79681","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a78d98da-381f-47b8-acd0-1b702fa9b1e7","keyName":"e2e-ipp-579628","selected_subscription":"ipp-route-579628-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-579628/ipp-route-579628-sub@ai-tenant-e2e-ipp-a-579628/ipp-route-579628","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-579628/models/facebook/opt-125m","name":"ipp-route-579628","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-579628-sub","namespace":"ai-tenant-e2e-ipp-a-579628","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-579628/ipp-route-579628"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ae20df-2380-450b-994c-a7bc87a79681","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-04T00:58:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ae20df-2380-450b-994c-a7bc87a79681","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f841596500fa42328c5325aade0c4622e79c40f4eb377000322b8186dabb2fb9"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5384dd6936f60bca998c92a9cd08cdc813f231601c1816bd8d9f4509cbe73b47"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da471d67e19ed6cd9818543b7e25f160ee19e9dbd200a928cca0cd8b361632c0"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a6cd3cb4b5fd00ac8ca0779d511e8421e8f545f62a2c32d50a2ffba958c624e"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a7b7a8860c2fa9a09fe71fb0e11c4114cb45a8060dbbaa03ffb58438371e396"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/363fb8aaaa366cca0e04d9486371eb8578328a9d82c74fbe122268515f1df1b7"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/805299ce500df20fe6688a01effc7ec8bcb2bc3e0bd0f6fd2f1d27999da51209"} {"level":"info","ts":"2026-08-04T00:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9740390986301bf2664f2381e292c00f71b8c38262ede13baa287a52f17a4b60"} {"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c591967ba7bd0b4456624cd6a59b4c03aa6488de8b6c25db392bbc600521d86c"} {"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a09da6e215e20f67ae086bc4feb7b830dfd94cab881e58971149661afb8ca27"} {"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1a79383d3230edcd62514c66d9e7e98742393abd940446cb1be6f328f38f7f"} {"level":"info","ts":"2026-08-04T00:59:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f06273fcadf19c190183b654905a739a14142b914fefec73ed18f4dc03053f"}